nanog mailing list archives

Re: SYN floods continue


From: "Justin W. Newton" <justin () erols com>
Date: Wed, 11 Sep 1996 16:22:57 -0400

At 06:43 PM 9/11/96 +0000, Larry J. Plato wrote:
If you can write a SYN flooder you can trivialy add the call to
to generate a random source address....

IMHO this is not a win.

Right, but if I am only allowing addresses which I own to leave my network,
and everyone else does the same, someone could only forge source addresses
which come from inside my network if they are dialed in to me.  This makes
he narrowing down process much easier.

Justin Newton
Internet Architect
Erol's Internet Services
- - - - - - - - - - - - - - - - -


Current thread: