[87875] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: BLS FastAccess internal tech needed

daemon@ATHENA.MIT.EDU (Fergie)
Thu Jan 12 23:40:48 2006

From: "Fergie" <fergdawg@netzero.net>
Date: Fri, 13 Jan 2006 04:38:57 GMT
To: smb@cs.columbia.edu
Cc: nanog@nanog.org
Errors-To: owner-nanog@merit.edu


This is why AAA is so important. :-)

- ferg


-- "Steven M. Bellovin" <smb@cs.columbia.edu> wrote:

In message <20060112.195851.1587.15308@webmail05.lax.untd.com>, "Fergie"=
 writes
:
>
>RFC2827/BCP38?
>

The problem is that an ISP can do all the source filtering it wants, =

but if it only blocks SYNs to port 25 all it takes is one unfiltered =

dial-up to spoof that ISP's addresses.

		--Steven M. Bellovin, http://www.cs.columbia.edu/~smb


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg@netzero.net or fergdawg@sbcglobal.net
 ferg's tech blog: http://fergdawg.blogspot.com/


home help back first fref pref prev next nref lref last post