[AusNOG] DDoS Attacks - Painful and Persistent.

[Roland Dobbins]

On Aug 10, 2009, at 1:24 PM, Vitaly Osipov wrote:

> A packet filter on a router somewhere, assuming it can handle the  
> load.


GMTA - if this isn't a live service on the target host, hardware-based  
routers at the upstream/peer level should be able to handle filtering  
out this traffic.  This is a good example of why the days of Internet- 
facing software-based routers is really over, ASICs are needed to deal  
with anything beyond the most trivial attacks.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

         Unfortunately, inefficiency scales really well.

		   -- Kevin Lawton