Are we really this helpless? (Re: isprime DOS in progress)

Sat Jan 24 05:06:28 UTC 2009

On Jan 23, 2009, at 8:53 PM, Danny McPherson wrote:
> You missed one..  Step 4: enable BCP 38 or similar
> ingress source address spoofing mitigation mechanism
> on all customer ingress interfaces
> ...
> No more excuses, people..

Sad fact is that there are zillions of excuses.  Unfortunately I  
suspect the only way we're going to make any progress on this will be  
for laws to be passed (or lawsuits to be filed) that impose a  
financial penalty on ISPs through which these attacks propagate.

Regards,
-drc