Re: Speaking of spamhaus...
Dan Oetting <[email protected]> Thu, 28 Mar 2013 08:57:58 -0600
| Newsgroups | gmane.ietf.asrg |
|---|---|
| Message-ID | <[email protected]> |
On Mar 27, 2013, at 9:26, Barry Shein <[email protected]> wrote: > > Possibly interesting: > > Big DDoS against SpamHaus, allegedly by CyberBunker... > > http://www.bbc.co.uk/news/technology-21954636 Why are forged source addresses tolerated? I don't care how convoluted the network is, eventually it gets down to a few gateways into a zone with a well defined set of valid addresses. At those gateways they can implement egress filtering to keep invalid packets from getting out. In the wider network where bandwidths may be too high or routing maps too complex for real time filtering, sampling can be employed to detect probably sources of forged addresses. --Dan O. - This is the asrg mailing list. To change your subscription settings, see http://lists.services.net/cgi-bin/mj_wwwusr/domain=lists.gurus.org