20 Apr
2010
20 Apr
'10
6:27 a.m.
* Bryan Fields:
Yes, but I was showing what a great DDOS attack method it would be too ;)
The beauty of flow-based forwarding (with or without NAT) is that several types of denial-of-service attacks tend to hurt close to the packet sources, and not just close to the victim. As far as the whole system is concerned, this is a very, very good thing.