nanog mailing list archives
Re: WANTED: ISPs with DDoS defense solutions
From: Henry Linneweh <hrlinneweh () sbcglobal net>
Date: Wed, 30 Jul 2003 18:51:29 -0700 (PDT)
I agree with Pauls' position on anti-spoofing, without that, you are fighting A losing battle. Henry R Linneweh Paul Vixie <vixie () vix com> wrote:
Filtering the bogons does help, and everyone should perform anti-spoofing in the appropriate places. It isn't, however, a silver bullet.
it's necessary but not sufficient. but if we knew the source addresses were authentic, then some pressure on the RIRs to make address block holders reachable would yield entirely new echelons of accountability. with the current anonymity of ddos sources, it's not possible to file a class action lawsuit against suppliers of the equipment, or software, or services which make highly damaging ddos's a fact of life for millions of potential class members. so please focus on "anti-spoofing"'s *necessity* and not on the fact that by itself it won't be sufficient. "anti-spoofing" will enable solutions which are completely beyond consideration at this time. (we'll know the tide has turned when BCP38 certifications for ISPs are available from the equivilent of "big 8" ("big 2" now?) accounting firms, and these certifications will be prerequisite to getting BGP set up.) -- Paul Vixie
Current thread:
- Re: WANTED: ISPs with DDoS defense solutions, (continued)
- Re: WANTED: ISPs with DDoS defense solutions Jared Mauch (Jul 30)
- Re: WANTED: ISPs with DDoS defense solutions Mike Tancsa (Jul 30)
- Re: WANTED: ISPs with DDoS defense solutions variable (Jul 30)
- Re: WANTED: ISPs with DDoS defense solutions Christopher L. Morrow (Jul 30)
- Re: WANTED: ISPs with DDoS defense solutions Mike Tancsa (Jul 30)
- Re: WANTED: ISPs with DDoS defense solutions Rob Thomas (Jul 30)
- Re: WANTED: ISPs with DDoS defense solutions Christopher L. Morrow (Jul 30)
- Re: WANTED: ISPs with DDoS defense solutions variable () ednet co uk (Jul 31)
- Re: WANTED: ISPs with DDoS defense solutions Rob Thomas (Jul 30)
- Re: WANTED: ISPs with DDoS defense solutions Paul Vixie (Jul 30)
- Re: WANTED: ISPs with DDoS defense solutions Henry Linneweh (Jul 30)
- Re: WANTED: ISPs with DDoS defense solutions Randy Bush (Jul 30)
- Re: WANTED: ISPs with DDoS defense solutions variable (Jul 31)
- Re: WANTED: ISPs with DDoS defense solutions Petri Helenius (Jul 31)
- Re: WANTED: ISPs with DDoS defense solutions Stephen J. Wilcox (Jul 31)
- Re: WANTED: ISPs with DDoS defense solutions Rob Thomas (Jul 31)
- Re: WANTED: ISPs with DDoS defense solutions Petri Helenius (Jul 30)
- Re: WANTED: ISPs with DDoS defense solutions Paul Vixie (Jul 30)
- Re: WANTED: ISPs with DDoS defense solutions Petri Helenius (Jul 30)
- Re: WANTED: ISPs with DDoS defense solutions Vadim Antonov (Jul 31)
- Re: WANTED: ISPs with DDoS defense solutions Petri Helenius (Jul 31)