North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Real-Time Mitigation of Denial of Service Attacks Now Available With AT&T

  • From: Valdis.Kletnieks
  • Date: Wed Jun 02 15:28:54 2004

On Wed, 02 Jun 2004 11:39:39 MDT, Danny McPherson <[email protected]>  said:

> How do you discriminate *DDOS attacks employing source address spoofing*
> from broken NATs, rampant worms, PMTU and other related misconfiguration
> resulting in backscatter and similar garbage - with filter counters?  

A bogon packet is a bogon packet Filter them all and let the appropriate deity
sort them out (unless you bill by traffic volume ;)

Attachment: pgp00002.pgp
Description: PGP signature