North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: address spoofing

  • From: Dan Hollis
  • Date: Fri Apr 23 21:22:49 1999

On Fri, 23 Apr 1999, Randy Bush wrote:
> huh?  for packet filtering, which is what we've been discussing, my
> experience is quite the opposite.  one can't really afford packet
> filters on routers with oc12s.  and in a multi-path universe, filtering
> for source address spoofing is best done at the edges anyway.

Wonder if its too much to ask the backbones to do sanity checks on their
customers T1 lines etc. Eg they arent smurf amplifiers, they have spoof
filters, yadda yadda.

If this happened perhaps the rate of DoS attacks would go down

-Dan