Re: engineering --> ddos and flooding
Dan Foster <dsf@frontiernet.net> writes:
I, too, am much looking forward to the proposed standards to turn this kind of thing into a non-event. :)
Well, look no further than here, for your prayers are answered: On any connection to an end-user, ISPs shall forward only packets with source addresses assigned to that end-user by the ISP. Exceptions can be made for multi-homed end-users: e.g., if an end-user has 1.2.3.0/24 from ISP A, and 5.6.7.0/24 from ISP B, each ISP may choose to accept packets with source addresses from the block assigned by the other ISP, by prior arrangement with the end-user and the other ISP. Now, if you're looking forward to the *implementation* of this proposed standard, you had best be looking through a very strong telescope. It will happen some time after the last open SMTP relay on the Internet is secured :-(. Jim Shankland
participants (1)
-
Jim Shankland