29 Mar
2001
29 Mar
'01
5:56 p.m.
They could do almost exactly the same amount of damage with an unspoofed UDP flood and it would still take a human action to stop it.
This is a false premise. I get hit with one-off attacks pretty often (oversized pings against my NT boxes, etc.), which are impossible to trace because of invalid source addresses. Source filters would mean that those attacks would be identifiable period, which they are not now. -- Eric A. Hall http://www.ehsco.com/ Internet Core Protocols http://www.oreilly.com/catalog/coreprot/