nanog mailing list archives
Re: Re[4]: SYN floods (was: does history repeat itself?)
From: "Alec H. Peterson" <chuckie () panix com>
Date: Tue, 10 Sep 1996 17:05:21 -0400 (EDT)
Pat Calhoun writes:
Alexis, However if you are filtering on your outbound router to the net, there is still the possbility that a malicious user could spoof addresses as long as they belong to your address space. By moving the filter out to the edge (when you have the equipment) this eliminates that problem as well.
This is true, but if it is a valid host, the invalid SYNs will do nothing, because the source host will send a RST and the almost-connection will be torn down. And if it isn't a valid host, it will still be _much_ easier to track, because you know in general where it's coming from. Alec -- +------------------------------------+--------------------------------------+ |Alec Peterson - chuckie () panix com | Panix Public Access Internet and UNIX| |Network Administrator/Architect | New York City, NY | +------------------------------------+--------------------------------------+ - - - - - - - - - - - - - - - - -
Current thread:
- Re: Re[2]: SYN floods (was: does history repeat itself?), (continued)
- Re: Re[2]: SYN floods (was: does history repeat itself?) John G. Scudder (Sep 12)
- Re: Re[2]: SYN floods (was: does history repeat itself?) Joel Gallun (Sep 12)
- Re: Re[2]: SYN floods (was: does history repeat itself?) Michael Dillon (Sep 12)
- Re: Re[2]: SYN floods (was: does history repeat itself?) Alex.Bligh (Sep 12)
- Re: Re[2]: SYN floods (was: does history repeat itself?) Neil J. McRae (Sep 13)
- Re: Re[2]: SYN floods (was: does history repeat itself?) John G. Scudder (Sep 12)
- Re: Re[4]: SYN floods (was: does history repeat itself?) Perry E. Metzger (Sep 10)
- Re: Re[4]: SYN floods (was: does history repeat itself?) Alec H. Peterson (Sep 10)
- Re: Re[4]: SYN floods (was: does history repeat itself?) Perry E. Metzger (Sep 10)
- Re: Re[4]: SYN floods (was: does history repeat itself?) Alexis Rosen (Sep 10)
- Re: Re[4]: SYN floods (was: does history repeat itself?) Curtis Villamizar (Sep 12)
- Re: Re[2]: SYN floods (was: does history repeat itself?) Alexis Rosen (Sep 10)
- Re: Re[2]: SYN floods (was: does history repeat itself?) Paul Frommeyer (Sep 10)
- Re: Re[2]: SYN floods (was: does history repeat itself?) Dick St.Peters (Sep 11)
- Re: Re[2]: SYN floods (was: does history repeat itself?) Michael Dillon (Sep 12)