BLS FastAccess internal tech needed

Steven M. Bellovin smb at cs.columbia.edu
Fri Jan 13 04:09:13 UTC 2006 

In message <20060112.195851.1587.15308 at webmail05.lax.untd.com>, "Fergie" writes
:
>
>RFC2827/BCP38?
>

The problem is that an ISP can do all the source filtering it wants, 
but if it only blocks SYNs to port 25 all it takes is one unfiltered 
dial-up to spoof that ISP's addresses.

		--Steven M. Bellovin, http://www.cs.columbia.edu/~smb

More information about the NANOG mailing list