nanog mailing list archives
Re: TWC (AS11351) blocking all NTP?
From: Doug Barton <dougb () dougbarton us>
Date: Tue, 04 Feb 2014 11:08:09 -0800
On 02/04/2014 08:04 AM, William Herrin wrote:
On Sun, Feb 2, 2014 at 5:17 PM, Cb B <cb.list6 () gmail com> wrote:And, i agree bcp38 would help but that was published 14 years ago.Howdy, If just three of the transit-free networks rewrote their peering contracts such that there was a $10k per day penalty for sending packets with source addresses the peer should reasonably have known were forged, this problem would go away in a matter of weeks. Granted it would also be helpful to have a BGP extension signifying allowed-source-but-don't-route so that RP filtering would work even when multihomed. Still, even without automatic RP filtering we're capable of preventing spoofed packets if financially incentivized. Thing is, they can't be the source of the solution until they stop being part of the problem.
Won't work because no one will sign that contract.The answer is lawsuits. People who are damaged by DDOS need to file suit against the networks that allowed the spoofed packets. Once it becomes more expensive to allow the spoofing (due to both damages and legal bills) than it is to prevent it, people will work harder to prevent it.
Doug
Current thread:
- Re: BCP38 is hard; let's go shopping!, (continued)
- Re: BCP38 is hard; let's go shopping! Christopher Morrow (Feb 05)
- Re: BCP38 [Was: Re: TWC (AS11351) blocking all NTP?] Seth Mattinen (Feb 05)
- Re: BCP38 [Was: Re: TWC (AS11351) blocking all NTP?] Mark Tinka (Feb 05)
- Re: BCP38 [Was: Re: TWC (AS11351) blocking all NTP?] Jay Ashworth (Feb 05)
- Re: BCP38 [Was: Re: TWC (AS11351) blocking all NTP?] Mark Tinka (Feb 05)
- Re: BCP38 [Was: Re: TWC (AS11351) blocking all NTP?] Jay Ashworth (Feb 05)
- Re: TWC (AS11351) blocking all NTP? William Herrin (Feb 04)
- Re: TWC (AS11351) blocking all NTP? Jared Mauch (Feb 04)
- Re: TWC (AS11351) blocking all NTP? Jay Ashworth (Feb 04)
- Re: TWC (AS11351) blocking all NTP? Michael Smith (Feb 06)
- Re: TWC (AS11351) blocking all NTP? Doug Barton (Feb 04)
- Re: TWC (AS11351) blocking all NTP? William Herrin (Feb 04)
- Re: TWC (AS11351) blocking all NTP? Christopher Morrow (Feb 04)
- Re: TWC (AS11351) blocking all NTP? Majdi S. Abbas (Feb 04)
- Re: TWC (AS11351) blocking all NTP? William Herrin (Feb 04)
- Re: BCP38 is hard, was TWC (AS11351) blocking all NTP? John Levine (Feb 04)
- Re: BCP38 is hard, was TWC (AS11351) blocking all NTP? Paul Ferguson (Feb 04)
- Re: BCP38 is hard, was TWC (AS11351) blocking all NTP? Chuck Anderson (Feb 04)
- Re: BCP38 is hard, was TWC (AS11351) blocking all NTP? William Herrin (Feb 04)
- Re: BCP38 is hard, was TWC (AS11351) blocking all NTP? Octavio Alvarez (Feb 04)
- Re: BCP38 is hard, was TWC (AS11351) blocking all NTP? John R. Levine (Feb 04)