North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Real-Time Mitigation of Denial of Service Attacks NowAvailable With AT&T

  • From: Erik Haagsman
  • Date: Fri Jun 04 10:16:50 2004

> True, but no-one is saying the entire network should be done in one fell
> swoop. Eventually, larger companies WILL have to replace outdated
> components and when they do they can replace them and at the same time
> make sure ACL's or uBRF

uRPF even..weird typo

>  or whatever you use is in place. And before
> that, you could at least make sure your newer equipment that CAN easily
> take ACLs is properly configured. Currently most larger companies do
> neither, always pointing out the cost of doing a huge network wide
> upgrade that in actuality no-one is expecting them to do. Even if only a
> percentage of a large ISP's network (especially xDSL and HFC services)
> is properly configured, it'll save a lot of grief, cutting maintenance
> cost for the ISP itself as well as causing less headaches for other
> companies. And over time you just gradually update parts where you're
> replacing equipment that's at the end of it's lifecycle anyway.
> 
> 
> Cheers,
-- 
---
Erik Haagsman
Network Architect
We Dare BV
tel: +31(0)10 7507008
fax:+31(0)10 7507005
http://www.we-dare.nl