Re: DNS issues various

[Rob Thomas <robt () cymru com>]

Hi, NANOGers.

] I assert this is not the case. A significant percentage of DDoS attacks use
] legitimate source IP addresses. When there are thousands of throw-away hosts

I track several botnets per week, and a large amount of DDoS per week.
Only around 20% (or a bit less) of all the attacks I log use spoofed
source addresses.

Does anti-spoofing help?  Yes.  It is but one of many mitigation
strategies.

Thanks,
Rob.
-- 
Rob Thomas
http://www.cymru.com
ASSERT(coffee != empty);