Date: Tue, 18 Jan 2000 12:50:15 -0800 (PST) From: patl@phoenix.volant.org To: David Wolfskill <dhw@whistle.com> Cc: matt@ARPA.MAIL.NET, freebsd-security@freebsd.org Subject: Re: TCP/IP Message-ID: <ML-3.4.948228615.4905.patl@asimov.phoenix.volant.org> In-Reply-To: <200001181917.LAA76938@pau-amma.whistle.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 18-Jan-00 at 11:21, David Wolfskill (dhw@whistle.com) wrote: > >Date: Tue, 18 Jan 2000 12:53:12 -0500 > >From: matt <matt@ARPA.MAIL.NET> > > >I would love to talk my uplink (uunet.ca) into filtering certain things > >before they pass it on to my router, wish they would =/ Besides that, I > >filter syn,fin, icmp, all udp except ntp/dns, besides that, I don't think > >there is much that I can do. > > Put another router in series with it. Use an RFC 1918 "private net" > numbering scheme for that (pathological) network, which then becomes an > effective "demarc" between uunet.ca's responsibility/ability and yours. > > This generalizes, within reason. (Yes, it adds latency, too....) Umm, I think Matt's point was that he would like to filter these things out -before- they consume bandwidth between his uplink and his router. (I know I would...) -Pat To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ML-3.4.948228615.4905.patl>