Are we really this helpless? (Re: isprime DOS in progress)
drc at virtualized.org
Fri Jan 23 23:06:28 CST 2009
On Jan 23, 2009, at 8:53 PM, Danny McPherson wrote:
> You missed one.. Step 4: enable BCP 38 or similar
> ingress source address spoofing mitigation mechanism
> on all customer ingress interfaces
> No more excuses, people..
Sad fact is that there are zillions of excuses. Unfortunately I
suspect the only way we're going to make any progress on this will be
for laws to be passed (or lawsuits to be filed) that impose a
financial penalty on ISPs through which these attacks propagate.
More information about the NANOG