mailing list archives
Re: Are we really this helpless? (Re: isprime DOS in progress)
From: David Conrad <drc () virtualized org>
Date: Fri, 23 Jan 2009 21:06:28 -0800
On Jan 23, 2009, at 8:53 PM, Danny McPherson wrote:
You missed one.. Step 4: enable BCP 38 or similar
ingress source address spoofing mitigation mechanism
on all customer ingress interfaces
No more excuses, people..
Sad fact is that there are zillions of excuses. Unfortunately I
suspect the only way we're going to make any progress on this will be
for laws to be passed (or lawsuits to be filed) that impose a
financial penalty on ISPs through which these attacks propagate.