Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: BCP38 making it work, solving problems

  • From: Stephen J. Wilcox
  • Date: Wed Oct 13 13:01:41 2004

On 13 Oct 2004, Paul Vixie wrote:

> > >How many people have seen "forged" spoofed IP addresses being used for DOS
> > >attacks lately?
> 
> syn-flood protection, and random TCP ISS, are now common enough that
> spoofed-source isn't effective for TCP flows.  if you want to bring down
> somebody's web server then blackhats really do have to use real addresses.

of course the docs were written a couple years ago, and things have changed a
lot in that time. the proliference of and ease of establishing bot networks is
such that their controllers dont care if you track them and shut them down as 
they are easily replaced

Steve





Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.