North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: New Denial of Service Attack on Panix

  • From: Paul Ferguson
  • Date: Thu Oct 03 15:12:28 1996

I agree completely, but neither one is a panacea.

- paul

At 08:40 AM 10/3/96 -0400, Dima Volodin wrote:

>And if everyone doesn't make any attacks we won't have any problems
>either. To rephrase - relying on ingress filtering is putting your
>security in someone other's hands, doing host-based stuff is protecting
>yourself with your own hands. To rephrase once again - doing ingress
>filtering is "being conservative with what you produce", being able to
>cope with SYN floods on the host level is "being liberal on what you
>accept." We need both, and overemphasising one side of the solution will
>do a lot of harm.
>
>
>Dima
>

- - - - - - - - - - - - - - - - -