Re: Internet SYN Flooding, spoofing attacks

To: IETF at ietf.org
Subject: Re: Internet SYN Flooding, spoofing attacks
From: Vernon Schryver <vjs at calcite.rhyolite.com>
Date: Tue, 15 Feb 2000 10:22:46 -0700 (MST)

> From: Valdis.Kletnieks at vt.edu

> ...
> Well.. as soon as somebody presents us with "the real solution", we'll start
> implementing.  In the meantime, filtering is the best we know how to do.
> ...

I really wish "we" actually knew how to filter.

Just as I feared when the news broke, I'm seeing more paths where neither
traceroute nor ping work, apparently because some of "us" are so expert
that we turn off all of ICMP, and never mind intermittent blackholes from
Path MTU Discovery or diagnosing routing or other mere technical problems.


Vernon Schryver    vjs at rhyolite.com

Follow-Ups:
- Re: Internet SYN Flooding, spoofing attacks
  - From: Charles E. Perkins
- Re: Internet SYN Flooding, spoofing attacks
  - From: Michael H. Warfield

Prev by Date: Re: IETF Adelaide and interim meetings for APPS WGs
Next by Date: Re: IETF Adelaide and interim meetings for APPS WGs
Previous by thread: RE: Internet SYN Flooding, spoofing attacks
Next by thread: Re: Internet SYN Flooding, spoofing attacks
Index(es):
- Date
- Thread

Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.

Re: Internet SYN Flooding, spoofing attacks

Note: Messages sent to this list are the opinions of the senders and do not imply endorsement by the IETF.