Source address validation (was Re: UUNet Offer New Protection Against DDoS)

Stephen J. Wilcox steve at telecomplete.co.uk
Sun Mar 7 20:01:22 UTC 2004


> actually, it would.  universal uRPF would stop some attacks, and it would
> remove a "plan B" option for some attack-flowcharts.  i would *much* rather
> play defense without facing this latent weapon available to the offense.

I'm agreeing here, okay (yet anoter) example.. smurf attacks. These seem to be 
non-existent these days so shall we stop disabling 'ip directed-broadcast' on 
our routers?

Steve




More information about the NANOG mailing list