Re: DDoS Question

[Roland Dobbins <rdobbins () cisco com>]

On Sep 28, 2007, at 6:49 AM, Ken Simpson wrote:

> You might want to look at some kind of edge email
> traffic shaping layer.

So that 'Curtis Blackman' is the only one getting SMTP through to  
Martin and his customers?

;>

Assuming nothing in the header which could be blocked by S/RTBH or  
ACLs (or a QoS policy), some of the various DDoS scrubbers available  
from different vendors may be able to deal with this via the  
anomalous TCP rates associated with these streams of spam, and/or  
regexp.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () cisco com> // 408.527.6376 voice

           I don't sound like nobody.

               -- Elvis Presley