nanog mailing list archives

Re: Krebs on Security booted off Akamai network after DDoS attack proves pricey


From: John Kristoff <jtk () depaul edu>
Date: Sun, 25 Sep 2016 12:00:21 -0500

On Sun, 25 Sep 2016 14:36:18 +0000
Ca By <cb.list6 () gmail com> wrote:

As long as their is one spoof capable network on the net, the problem will
not be solved.

This is not strictly true.  If it could be determined where a large
bulk of the spoofing came from, public pressure could be applied.  This
may not have been the issue in this case, but in many amplification and
reflection attacks, the originating spoof-enabled networks were from a
limited set of networks.  De-peering, service termination, shaming, etc
could have an effect.

John


Current thread: