nanog mailing list archives

Re: Defeating DoS Attacks Through Accountability


From: Austin Schutz <tex () off org>
Date: Sat, 11 Nov 2000 14:28:02 -0800


On Sat, Nov 11, 2000 at 01:46:45PM -0800, Barry Raveendran Greene wrote:



I'll put it this way: filtering should be done against blocks that a
customer can announce, not against blocks that a customer is actively
announcing.  If you're filtering purely against current advertisements,
you're bound to break something sooner or later.

Good theory. But what one public source do all the ISP agree to validate the
authority to announce?


        CW? (ha ha)

        Who says you have to have use a public authority to filter your
customers against? You can have your own private authority, if you really
want. You just have to get the customer to populate/maintain their data in it.

        Austin



Current thread: