This is why AAA is so important. :-)
- ferg
-- "Steven M. Bellovin" <[EMAIL PROTECTED]> wrote:
In message <[EMAIL PROTECTED]>, "Fergie" writes
:
>
>RFC2827/BCP38?
>
The problem is that an ISP can do all the source filtering it wants,
but if it only blocks SYNs to port 25 all it takes is one unfiltered
dial-up to spoof that ISP's addresses.
--Steven M. Bellovin, http://www.cs.columbia.edu/~smb
--
"Fergie", a.k.a. Paul Ferguson
Engineering Architecture for the Internet
[EMAIL PROTECTED] or [EMAIL PROTECTED]
ferg's tech blog: http://fergdawg.blogspot.com/
