[lkml]   [1996]   [Oct]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: ICMPs & syn flood fix to prevent spoofing (previously "nuke?")
Date (Alan Cox) writes:

> providers to filter fake source addresses coming FROM their networks will
> solve these problems for good. Unfortunately it doesn't make them thousands
> of dollars so they don't seem to give a shit.

That won't solve them for good, though. You just have to set up
the fake address to be a host that doesn't exist, but the address
is still on the allowed net. Sure, it makes it easier to trace,
but it doesn't get rid of the problem entirely.

Darrell Fuhriman

 \ /
  Last update: 2005-03-22 13:38    [W:0.030 / U:0.376 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site