North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Effective ways to deal with DDoS attacks?

  • From: Pete Kruckenberg
  • Date: Thu May 02 01:58:25 2002

On Thu, 2 May 2002, Richard A Steenbergen wrote:

>> SYN packet comes in, one of these machines responses with a
>> RST to the "source", which is actually the target of the
> 
> You have an interesting situation. I think rate limiting
> outbound RSTs would be the least offensive thing you
> could do, off the top of my head.

What about just blocking out-going RSTs altogether from our
borders? While this interferes with "proper" TCP
functionality, would it actually interfere enough to cause
noticeable problems? Would certainly be less of a burden on
routers than rate-limiting.

Pete.