On Tue, 06 Mar 2007 21:54:06 +0100, Mikael Abrahamsson said: > So instead I just drop their spoofed traffic and if they call and say that > their line is slow, I'll just say it's full and they can themselves track > down the offending machine and shut it off to solve the problem.
This doesn't sound very scalable. You're almost certainly overcommitted on the upstream side and likely looking at congestion if many customers are spewing. What do you tell the customer who calls and complains that *he* isn't a major traffic source, but he's seeing dropped packets and delays on your upstream link? Do you tell him its full and they can track down which other customer is the offender?
pgplTvKVzbxLB.pgp
Description: PGP signature
