nanog mailing list archives

Re: D/DoS mitigation hardware/software needed.


From: "Dobbins, Roland" <rdobbins () arbor net>
Date: Tue, 5 Jan 2010 03:15:42 +0000


On Jan 5, 2010, at 10:14 AM, Dobbins, Roland wrote:

If it's a stateful firewall, and state-tracking is turned on, it's quite possible to craft sufficient pathological 
traffic which conforms to the firewall policies and yet which leads to state-table inspection.

That should read 'state-table exhaustion', apologies for the typo.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

    Injustice is relatively easy to bear; what stings is justice.

                        -- H.L. Mencken





Current thread: