North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: SYN spoofing

  • From: Daniel Senie
  • Date: Wed Jul 28 14:49:22 1999

Wayne Bouchard wrote:
> Right, but ISPs can still filter on the corporate networks and at the
> aggregation points for DSL and dial and any non-bgp customer. Those
> talking BGP to you should be encouraged to do similarly. The full
> thing is like next to impossible to maintain but doing these kinds of
> relatively stady-state bits and pieces can help.

And especially filtering out stuff like RFC 1918 source addresses and
such. That kind of thing should be possible on all routers (core and
edge) rather than adding to the pollution on the 'net.

Daniel Senie                                        [email protected]
Amaranth Networks Inc.