lkml.org 
[lkml]   [1996]   [Oct]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: ICMPs & syn flood fix to prevent spoofing (previously "nuke?")
From
Date
alan@lxorguk.ukuu.org.uk (Alan Cox) writes:

> providers to filter fake source addresses coming FROM their networks will
> solve these problems for good. Unfortunately it doesn't make them thousands
> of dollars so they don't seem to give a shit.

That won't solve them for good, though. You just have to set up
the fake address to be a host that doesn't exist, but the address
is still on the allowed net. Sure, it makes it easier to trace,
but it doesn't get rid of the problem entirely.

Darrell Fuhriman


\
 
 \ /
  Last update: 2005-03-22 13:38    [from the cache]
©2003-2014 Jasper Spaans. Advertise on this site