![nanog logo](/images/nanog-logo.png)
nanog mailing list archives
Re: Using Policy Routing to stop DoS attacks
From: Stefan Mink <mink () schlund net>
Date: Tue, 13 May 2003 09:46:50 +0200
On Mon, May 12, 2003 at 04:38:30PM +0530, Lars Higham wrote:
Ya, you configure the next-hop of the source route(s) to discard -
just if I got this right: On both, Juniper and Cisco, if the source OR destination address is reachable via [NULL0|Discard], the packet gets dropped if RPF is enabled on the interface. Does this work in loose mode too? Thanx && tschuess Stefan Mink -- Stefan Mink, Schlund+Partner AG (AS 8560) Primary key fingerprint: 389E 5DC9 751F A6EB B974 DC3F 7A1B CF62 F0D4 D2BA
Attachment:
_bin
Description:
Current thread:
- Re: Using Policy Routing to stop DoS attacks Stefan Mink (May 12)
- Re: Using Policy Routing to stop DoS attacks Christopher L. Morrow (May 12)
- Message not available
- Re: Using Policy Routing to stop DoS attacks Stefan Mink (May 13)
- Re: Using Policy Routing to stop DoS attacks Jeff Kell (May 13)
- Re: Using Policy Routing to stop DoS attacks Stefan Mink (May 13)
- <Possible follow-ups>
- RE: Using Policy Routing to stop DoS attacks Christopher L. Morrow (May 13)
- RE: Using Policy Routing to stop DoS attacks Christopher L. Morrow (May 13)