North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: [arin-announce] IPv4 Address Space (fwd)

  • From: Owen DeLong
  • Date: Fri Oct 31 12:23:16 2003

Are you actually saying that providers in the middle should build their
networks to accommodate any amount of DDOS traffic their ingress can
support instead of filtering it at their edge? How do you expect them
to pay for that? Do you really want $10,000/megabit transit costs?

Owen


--On Friday, October 31, 2003 7:43 AM -0500 Alex Yuriev <[email protected]> wrote:


> It is content filtering. You are filtering packets that you think are
> causing problems to the ES that you may not control.

No, he said quite clearly he's filtering packets (such as Nachi ICMP)
that are causing harm to *his* network.  He gets to make a choice -
filter the known problem packets so the rest of the traffic can get
through, or watch the network melt down and nobody gets anything.
He needs to fix his network so those 92 byte ICMP packets wont break it.

Alex



--
If it wasn't signed, it probably didn't come from me.

Attachment: pgp00053.pgp
Description: PGP signature