nanog mailing list archives
Re: GoDaddy : DDoS : : Contact
From: "Roland Dobbins" <rdobbins () arbor net>
Date: Mon, 03 Aug 2015 19:51:23 +0700
On 3 Aug 2015, at 19:40, Mel Beckman wrote:
What would be the point of spoofing the source IPs to be identical? You're just making the attack trivial to block.
Attackers do strange things all the time.Most endpoint organizations don't have any way to detect/classify DDoS traffic, so they've no idea how to block it.
Plus, it can asymmetrically strain load-balanced server instances, links, et. al.
Most DDoS attacks don't involve TCP and 3-way handshakes. That isn't to say they aren't common, but one oughtn't to assume that having the ability to do so is a prerequisite for an attacker.
----------------------------------- Roland Dobbins <rdobbins () arbor net>
Current thread:
- Re: GoDaddy : DDoS :: Contact, (continued)
- Re: GoDaddy : DDoS :: Contact tqr2813d376cjozqap1l (Aug 02)
- Re: GoDaddy : DDoS :: Contact Roland Dobbins (Aug 02)
- Re: GoDaddy : DDoS :: Contact tqr2813d376cjozqap1l (Aug 02)
- Re: GoDaddy : DDoS :: Contact Roland Dobbins (Aug 02)
- Re: GoDaddy : DDoS :: Contact Valdis . Kletnieks (Aug 02)
- Re: GoDaddy : DDoS :: Contact tqr2813d376cjozqap1l (Aug 02)
- Re: GoDaddy : DDoS :: Contact Dovid Bender (Aug 03)
- Re: GoDaddy : DDoS :: Contact Roland Dobbins (Aug 02)
- Re: GoDaddy : DDoS : : Contact John Levine (Aug 02)
- Re: GoDaddy : DDoS : : Contact Roland Dobbins (Aug 02)
- Re: GoDaddy : DDoS : : Contact Mel Beckman (Aug 03)
- Re: GoDaddy : DDoS : : Contact Roland Dobbins (Aug 03)
- Re: GoDaddy : DDoS : : Contact A . L . M . Buxey (Aug 03)
- Re: GoDaddy : DDoS : : Contact Stephen Satchell (Aug 03)
- Re: GoDaddy : DDoS : : Contact Mel Beckman (Aug 03)
- Re: GoDaddy : DDoS : : Contact Roland Dobbins (Aug 03)
- Re: GoDaddy : DDoS : : Contact Roland Dobbins (Aug 03)
- Re: GoDaddy : DDoS : : Contact Stephen Satchell (Aug 03)
- Re: GoDaddy : DDoS : : Contact Roland Dobbins (Aug 03)
- Re: GoDaddy : DDoS :: Contact tqr2813d376cjozqap1l (Aug 02)