nanog mailing list archives

Re: port scanning from spoofed addresses


From: Gregory Edigarov <greg () bestnet kharkov ua>
Date: Fri, 4 Dec 2009 11:08:55 +0200

On Thu, 3 Dec 2009 13:03:20 -0500
Matthew Huff <mhuff () ox com> wrote:

I'm not at all concerned about door-knob twisting or network
scanning. What concerns me is that the source addresses are spoofed
from our address range and that our upstream providers aren't willing
to even look at the problem. 

But that can be easy addressed by yourself.
just do not allow traffic originating from your range on your
external interfaces.

-- 
With best regards,
        Gregory Edigarov


Current thread: