North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Counter DoS

  • From: Laurence F. Sheldon, Jr.
  • Date: Thu Mar 11 17:24:52 2004 
william(at)elan.net wrote:


On Thu, 11 Mar 2004, Laurence F. Sheldon, Jr. wrote:


Petri Helenius wrote:
Maybe there is a lesson to be learned from many RBL operators. To make sure, just send packets to the whole /24 or /16 you got an "attack" packet from.
Which RBL operators flood /24's or /16's?  What do they flood them
with?

I think he meant that RBLs sometimes include entire /24 in RBL list when only one or two ips are at fault and some would go even highier to include entire ISP allocation. This is probably talking about SPEWs and alike RBLs
I thought "RBL" was a tademark of Abovenet or MAPS or somebody.

--
Requiescas in pace o email