level3 dia egress filtering?

Christopher Rogers phiber at phiber.org
Mon May 12 21:46:53 UTC 2014


Does anyone have any experience dealing with level3 in trying to get egress
filters applied to an internet dia link with them?

I've been trying to get them to apply an egress filter to drop all of udp
to a certain /25 on my network that's been getting hammered by a dns
amplification attack, and I am being told that they can only 'drop an
entire protocol, and not to a specific ip address or range.'

Can anyone confirm if that's the case?

cheers
-chris



More information about the NANOG mailing list