RE: DDoS protection

"Wagner, Brett" <[email protected]> Fri, 20 Jun 2014 16:56:55 +0000
Newsgroups gmane.comp.security.basics
Message-ID <[email protected]>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