North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Source address validation (was Re: UUNet Offer New ProtectionAgainst DDoS)

  • From: Stephen J. Wilcox
  • Date: Sun Mar 07 15:03:52 2004

> actually, it would.  universal uRPF would stop some attacks, and it would
> remove a "plan B" option for some attack-flowcharts.  i would *much* rather
> play defense without facing this latent weapon available to the offense.

I'm agreeing here, okay (yet anoter) example.. smurf attacks. These seem to be 
non-existent these days so shall we stop disabling 'ip directed-broadcast' on 
our routers?

Steve