North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Effective ways to deal with DDoS attacks?

  • From: Ralph Doncaster
  • Date: Mon May 06 19:45:04 2002

On Mon, 6 May 2002, [email protected] wrote:

> On Mon, 06 May 2002 19:04:11 EDT, Ralph Doncaster said:
> 
> > IP Tunneling - it often makes more sense to send packets out that have a
> > source address reachable only through the tunnel.
> 
> But aren't those source addresses hidden *inside* the encapsulation, and
> what's visible to routers are the source/dest IPs of the tunnel itself?

What I'm saying is that if something comes in through the tunnel, the
shortest route to the destination is often not to go back out through the
tunnel.