Home page logo

nanog logo nanog mailing list archives

Re: WANTED: ISPs with DDoS defense solutions
From: bdragon () gweep net
Date: Mon, 4 Aug 2003 18:59:52 -0400 (EDT)

Filtering the bogons does help, and everyone should perform anti-spoofing
in the appropriate places.  It isn't, however, a silver bullet.
it's necessary but not sufficient.
anti-spoofing is useful, but vastly insufficient, and hence not necessary
anti-spoofing eliminates certain avenues of attack allowing one to focus
on remaining avenues, and hence (as Vix stated) is necessary but not

it turns 1% of the technical problem into a massive social business
problem which, even if it was solvable (which it practically isn't),
would also be addressed by technical solutions where no spoofing is

but it would provide a lot of fun and soapboxes for wannabe net
police and vigilantes.


What is your solution which addresses the 100%? 99%? 50%?

What problems does anti-spoofing create?

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]