DDoS Question

Roland Dobbins rdobbins at cisco.com
Fri Sep 28 00:28:03 UTC 2007



On Sep 28, 2007, at 6:49 AM, Ken Simpson wrote:

> You might want to look at some kind of edge email
> traffic shaping layer.

So that 'Curtis Blackman' is the only one getting SMTP through to  
Martin and his customers?

;>

Assuming nothing in the header which could be blocked by S/RTBH or  
ACLs (or a QoS policy), some of the various DDoS scrubbers available  
from different vendors may be able to deal with this via the  
anomalous TCP rates associated with these streams of spam, and/or  
regexp.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at cisco.com> // 408.527.6376 voice

	   I don't sound like nobody.

                -- Elvis Presley




More information about the NANOG mailing list