Re: Internet SYN Flooding, spoofing attacks

2000-02-17 Thread Dick St.Peters
Phil Karn writes: > By the way, ingress filtering breaks things other than Mobile IP. > Consider the DirecPC service, which gives you a one-way (forward) > satellite channel at 400 kb/s. Your return link is via local dialup > service provider. If the local ISP (or its upstream provider) does > sou

Re: Internet SYN Flooding, spoofing attacks

2000-02-17 Thread RJ Atkinson
At 02:20 17-02-00 , Phil Karn wrote: >It's not because fixed addresses actually cost them more. Indeed, >another cable modem provider in the other part of town allocates fixed >addresses in an otherwise identical service that's $5/mo cheaper. No, >my provider does it simply because they can. They

Re: IETF Adelaide and interim meetings for APPS WGs

2000-02-17 Thread RJ Atkinson
At 21:22 15-02-00 , Tim Salo wrote: >The original poster may, in a very real sense, actually be representing a >company, whether the IETF wants to believe it or not. > >Of course, that leads to the rather interesting dilemma that we don't know >whether an individual is speaking on behalf or his or

Re: IETF Adelaide and interim meetings for APPS WGs

2000-02-17 Thread RJ Atkinson
At 03:37 15-02-00 , Vernon Schryver wrote: >Could Civil Service employees find it hard to get travel requests approved >for attending meetings of an outfit that gets carried away in its rules >and regulations on who can talk to whom? No. Been there, done that. Lots of pain being part of the US

RE: Internet SYN Flooding, spoofing attacks

2000-02-17 Thread RJ Atkinson
I'm uncomfortable with the tone of some of the responses on this thread. I don't think there is a need for anyone to be adversarial about this issue. Steve Kent's point that we in the Internet community need to work on other better mechanisms besides RPF checks is well taken. It is also the ca

Re: Internet SYN Flooding, spoofing attacks

2000-02-17 Thread Jon Crowcroft
In message <[EMAIL PROTECTED]>, "Steven M. Bell ovin" typed: >>Right. Yahoo, though, was flooded mostly by the volume. I worry about >>high-volume TCP garbage sent to port 80, which you can't filter. Steve so in the case that the server resource is overloaded, but not the link, what you