Discuss mailing list

[mike <mike AT pikeaero.com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/29/2013 05:37 PM, Guillaume Parent wrote:
> The tier 2 security page shows how to trivially defeat these
> attacks through netfilter. It is available on the wiki.
> 
> The target is the source IP address, not isc.org <http://isc.org>.
> 

I wouldn't say defeat, mitigate perhaps. The packets still arrive, and
with rotating banks of source IPs apparently, the mitigation does not
last long.

- --Mike


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJRfunCAAoJEA7EcEr0emgfE8cH/jPToUCn34O67+vCwGjSEgq8
JmY2JT9B22iqLe5CWbfxDhP4PvRl9YXbdOcLc2AFto1V7E/RGBCfERzfh+KIz/ij
ifFFcjwkgCKHyOMYT7tt899t2yjMekRCA1gRVPX11rMCVlm8wW6RpclkFhW7mIFt
13kY9q3p9uV8U8oQxBGr1DtblxaQlMOiseePKWNDeRsNnPyUWVQvgGjhUW9jMU5n
j4qvQt0Pr9tcReCOt8tcch/whjSVeHUelxvrHQNTWV6juqdvRhvKujO8oMbaOvjn
DI91zh0Bhaqgu8/PzKFE7jUI47FkPUSs3QEshU7/pmIIthqBx7lRz/ZLludprHA=
=0oA8
-----END PGP SIGNATURE-----