Timeline for DDoS: Why not block originating IP addresses?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 4, 2017 at 20:28 | comment | added | Dining Philosopher | @MichaelKjörling: the RFC calls it ingress filtering, I suppose since it targets traffic entering the network. | |
| Oct 26, 2016 at 9:20 | comment | added | user | You are confusing ingress (incoming traffic) with egress (outgoing traffic) filtering. In order to be effective, traffic filtering must be done near the source. That requires egress filtering; the origin ISP must set up their systems such that only packages claimed to come from their own IP addresses are allowed to get out of their network. The receiving ISP can only block traffic from obviously bad source addresses, which means "anything not claiming to be from us must be allowed through" instead of "anything not claiming to be from us must be dropped". | |
| Oct 23, 2016 at 1:48 | review | First posts | |||
| Oct 23, 2016 at 2:00 | |||||
| Oct 23, 2016 at 1:45 | history | answered | Shackledtodesk | CC BY-SA 3.0 |