nanog mailing list archives
Re: BCP38 making it work, solving problems
From: Bora Akyol <bora () cisco com>
Date: Tue, 12 Oct 2004 09:50:55 -0700
On 10/12/04 9:06 AM, "Paul Vixie" <vixie () vix com> wrote:
There is, of course, the issue of multihomed networks, or networks that have satellite connectivity etc emitting spoofed source packets.y'know, SAC004 (http://www.icann.org/committees/security/sac004.txt) is only four pages long, and one of those is references. you should read it before you call multihomed networks an "issue" wrt BCP38 deployment. in fact, you should read it, and BCP38, and BCP84, before participating in this discussion at all, either here, or at the bar-bofs next week.
Excerpt from the text quoted above: 2.3. For a DDoS attack to succeed more than once, the launch points must remain anonymous. Therefore, forged IP source addresses are used. From the victim's point of view, a DDoS attack seems to come from everywhere at once, even from many IP addresses that are unallocated or otherwise invalid. How many people have seen "forged" spoofed IP addresses being used for DOS attacks lately? Bora
Current thread:
- Re: BCP38 making it work, solving problems, (continued)
- Re: BCP38 making it work, solving problems JP Velders (Oct 19)
- Re: BCP38 making it work, solving problems Patrick W Gilmore (Oct 19)
- Re: BCP38 making it work, solving problems Jon Lewis (Oct 20)
- Re: BCP38 making it work, solving problems Joe Abley (Oct 21)
- Re: BCP38 making it work, solving problems Paul Vixie (Oct 19)
- Re: BCP38 making it work, solving problems JP Velders (Oct 19)
- Re: BCP38 making it work, solving problems Jared Mauch (Oct 19)
- Re: BCP38 making it work, solving problems Mark Andrews (Oct 19)
- Re: BCP38 making it work, solving problems Paul Vixie (Oct 12)
- Re: BCP38 making it work, solving problems Suresh Ramasubramanian (Oct 12)
- Re: BCP38 making it work, solving problems Bora Akyol (Oct 12)
- Re: BCP38 making it work, solving problems Patrick W Gilmore (Oct 12)
- Re: BCP38 making it work, solving problems Christopher L. Morrow (Oct 12)
- Re: BCP38 making it work, solving problems Hank Nussbacher (Oct 13)
- Re: BCP38 making it work, solving problems Randy Bush (Oct 13)
- Re: BCP38 making it work, solving problems Hank Nussbacher (Oct 13)
- Re: BCP38 making it work, solving problems Randy Bush (Oct 13)
- Re: BCP38 making it work, solving problems Suresh Ramasubramanian (Oct 13)
- Re: BCP38 making it work, solving problems Paul Vixie (Oct 13)
- Re: BCP38 making it work, solving problems Stephen J. Wilcox (Oct 13)
- aggregation & table entries bmanning (Oct 13)