Source address validation (was Re: UUNet Offer New Protection Against DDoS)
Stephen J. Wilcox
steve at telecomplete.co.uk
Sun Mar 7 20:01:22 UTC 2004
> actually, it would. universal uRPF would stop some attacks, and it would
> remove a "plan B" option for some attack-flowcharts. i would *much* rather
> play defense without facing this latent weapon available to the offense.
I'm agreeing here, okay (yet anoter) example.. smurf attacks. These seem to be
non-existent these days so shall we stop disabling 'ip directed-broadcast' on
our routers?
Steve
More information about the NANOG
mailing list