[AusNOG] UDP Flooding Issues

[Sean K. Finn]

Hi All,

Does anyone know any techniqiues or ways to block BGP adverts to third party AS's, or a similar method for dropping routes *to* our AS from a distant, non directly connected AS ?

For example, is there a way to inject or craft maybe a network unreachable message or something that we can send to the offending A.S. to remove their routing information for *our* network / AS / IP ranges?

My scenario is that I'm trying to block UDP floods to our network, and I'm sure many of you have had experience with this. Im not looking for a total solution, although If you have any recommendations , that would be great. What I'm really after is just once peice of the puzzle to see if we can selectively choose which remote networks we are visible, as a direct first step to stopping attacks until a human can intervene.

Cheers,
Sean.
________________________________
Oz Servers
e: sean.finn at ozservers.com.au<mailto:sean.finn at ozservers.com.au>
w: http://www.ozservers.com.au<http://www.ozservers.com.au/>
p: 1300 13 89 69

[cid:image001.gif at 01C8D206.9A49BE60]

/
________________________________
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20080619/e4ad90bf/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.gif
Type: image/gif
Size: 2556 bytes
Desc: image001.gif
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20080619/e4ad90bf/attachment.gif>