Using Policy Routing to stop DoS attacks

Stefan Mink mink at schlund.net
Mon May 12 09:55:52 UTC 2003


On Tue, Mar 25, 2003 at 04:58:59PM +0000, Christopher L. Morrow wrote:
> you could hold blackhole routes for these destinations in your route table
> (local or bgp) So long as the destination for the source is bad (null for
> instance) the traffic would get dropped. I believe the proper terms from
> cisco for this are: "So long as the adjacency is invalid" ...

is there a way to make this source-blackhole-routing work 
on J's too (does this work with discard-routes too)?

   tschuess
             Stefan
-- 
Stefan Mink, Schlund+Partner AG (AS 8560)
Primary key fingerprint: 389E 5DC9 751F A6EB B974  DC3F 7A1B CF62 F0D4 D2BA
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20030512/d197c452/attachment.sig>


More information about the NANOG mailing list