Re: [c-nsp] Firewalls in front of Internet servers (was: cisco-nsp Digest, Vol 83, Issue 39)

2009-10-12 Thread Peter Rathlev
On Mon, 2009-10-12 at 09:19 -0700, Joel M Snyder wrote: You may remember last year's the Internet is falling and only Dan Kaminsky can explain it flap around DNS. Well, a lot of the discussion around this bug/problem/issue ignored the truth that a good firewall prevented the attack directly,

Re: [c-nsp] Firewalls in front of Internet servers

2009-10-12 Thread Joel M Snyder
Peter Rathlev wrote: On Mon, 2009-10-12 at 09:19 -0700, Joel M Snyder wrote: You may remember last year's the Internet is falling and only Dan Kaminsky can explain it flap around DNS. Well, a lot of the discussion around this bug/problem/issue ignored the truth that a good firewall

Re: [c-nsp] Firewalls in front of Internet servers

2009-10-12 Thread Joel M Snyder
Sorry: Now, maybe this is NANOG and ISPs operate in a 'we're just a utility Meant maybe this is cisco NSP ... Apologies for the obvious stupid error. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus1.com