nanog mailing list archives

Re: BLS FastAccess internal tech needed


From: "Steven M. Bellovin" <smb () cs columbia edu>
Date: Thu, 12 Jan 2006 23:09:13 -0500


In message <20060112.195851.1587.15308 () webmail05 lax untd com>, "Fergie" writes
:

RFC2827/BCP38?


The problem is that an ISP can do all the source filtering it wants, 
but if it only blocks SYNs to port 25 all it takes is one unfiltered 
dial-up to spoof that ISP's addresses.

                --Steven M. Bellovin, http://www.cs.columbia.edu/~smb



Current thread: