North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Re: Real-Time Mitigation of Denial of Service Attacks Now Available With AT&T
On Wed, 02 Jun 2004 11:39:39 MDT, Danny McPherson <[email protected]> said: > How do you discriminate *DDOS attacks employing source address spoofing* > from broken NATs, rampant worms, PMTU and other related misconfiguration > resulting in backscatter and similar garbage - with filter counters? A bogon packet is a bogon packet Filter them all and let the appropriate deity sort them out (unless you bill by traffic volume ;) Attachment:
pgp00002.pgp
|