Re: OT: Re: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-23 Thread Petri Helenius
The first MPEG-4 HD set top boxes are beginning to appear http://www.sigmadesigns.com/news/press_releases/030108.htm Watch this space If you read the document carefully, you´ll figure that they support MPEG2 HDTV (1920x1080) and MPEG4 SDTV (640x480/720x576), which was my point earlier.

Re: OT: Re: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-23 Thread Christopher L. Morrow
On Wed, 22 Jan 2003, Baldwin, James wrote: Something I'm surprised no one has commented on considering the direction of this thread has been should ISPs be responsible for customer actions if they are not allowed to refuse service to customers? ISP's can't refuse service to customers?

Re: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-22 Thread Damian Gerow
On Wed, 22 Jan 2003 11:11:19 -0500 Damian Gerow [EMAIL PROTECTED] wrote: (Taking NANOG out, as this is moving a little towards personal conversation) Apparently, I didn't read my own Cc: line. Sorry, folks.

RE: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-22 Thread Al Rowland
:[EMAIL PROTECTED]] On Behalf Of Vadim Antonov Sent: Tuesday, January 21, 2003 5:51 PM To: todd glassey Cc: [EMAIL PROTECTED] Subject: Re: FW: Re: Is there a line of defense against Distributed Reflective attacks? On Tue, 21 Jan 2003, todd glassey wrote: Vadim - the instant

RE: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-22 Thread Chris Parker
At 09:28 AM 1/22/2003 -0800, Al Rowland wrote: Not to mention that fact that 99.99% of current consumer connections are not up to the task. Standard full-screen video digital stream is ~6Mbps, HDTV requires 19.4Mbps. Don't know many consumers with T3s. ;) Drifting off-topic, but those are

Re: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-22 Thread Max's Lists
: Is there a line of defense against Distributed Reflective attacks? At 09:28 AM 1/22/2003 -0800, Al Rowland wrote: Not to mention that fact that 99.99% of current consumer connections are not up to the task. Standard full-screen video digital stream is ~6Mbps, HDTV requires 19.4Mbps. Don't know

OT: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-22 Thread Al Rowland
: Wednesday, January 22, 2003 10:02 AM To: [EMAIL PROTECTED] Subject: RE: FW: Re: Is there a line of defense against Distributed Reflective attacks? At 09:28 AM 1/22/2003 -0800, Al Rowland wrote: SNIP Drifting off-topic, but those are 'raw' data rates. Compression algorithms along

Re: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-22 Thread Vijay Gill
Al Rowland [EMAIL PROTECTED] writes: mention the effect everyone on AOL going to broadband and downloading Disney clips all the time would have on their settlement plans with backbone providers. Of course, because you are definitely being kept in the loop regarding the AOL settlement plans?

Re: OT: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-22 Thread Chris Parker
At 10:58 AM 1/22/2003 -0800, Al Rowland wrote: 1. I also remember when web page standards required you to design everything to fit in a 640x400 screen. DTV/HDTV will significantly change your 'not much in the way of image quality loss' yardstick. My viewing habits have changed significantly in

OT: Re: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-22 Thread Petri Helenius
Drifting off-topic, but those are 'raw' data rates. Compression algorithms along with motion-estimation allow you to get full-screen video down to ~1.5 Mbps with not much in the way of image quality loss. Raw HDTV is about 1.2Gbps. RAW NTSC SDI bitstream is a few hundred. The 6 and 19.8

Re: OT: Re: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-22 Thread Marshall Eubanks
Hello; On Wednesday, January 22, 2003, at 06:04 PM, Petri Helenius wrote: Drifting off-topic, but those are 'raw' data rates. Compression algorithms along with motion-estimation allow you to get full-screen video down to ~1.5 Mbps with not much in the way of image quality loss. Raw HDTV

Re: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-22 Thread todd glassey
Andy - - Original Message - From: Andy Dills [EMAIL PROTECTED] To: todd glassey [EMAIL PROTECTED] Cc: Vadim Antonov [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Wednesday, January 22, 2003 9:07 AM Subject: Re: FW: Re: Is there a line of defense against Distributed Reflective attacks

OT: Re: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-22 Thread Baldwin, James
Something I'm surprised no one has commented on considering the direction of this thread has been should ISPs be responsible for customer actions if they are not allowed to refuse service to customers? I'm surprised this hasn't come up since the latter half of the question also represented a

Re: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-21 Thread todd glassey
businesses. Todd Glassey - Original Message - From: Vadim Antonov [EMAIL PROTECTED] To: Avleen Vig [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Monday, January 20, 2003 7:59 PM Subject: Re: FW: Re: Is there a line of defense against Distributed Reflective attacks? On Mon, 20 Jan

Re: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-20 Thread Jeff Workman
Stoned koalas drooled eucalyptus spit in awe as Avleen Vig exclaimed: Doesn't this stop kazaa/morpheus/gnutella/FTP/some aim stuff like private chats? This is a problematic setup, and woudl require the cable modem provider to maintain a quickly changing 'firewall' :( I understand the want to

Re: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-20 Thread Scott Granados
PROTECTED]; Daniel Senie [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Monday, January 20, 2003 5:22 PM Subject: Re: FW: Re: Is there a line of defense against Distributed Reflective attacks? On Mon, 20 Jan 2003, Avleen Vig wrote: Doesn't this stop kazaa/morpheus/gnutella/FTP/some aim stuff

Re: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-19 Thread Johannes Ullrich
*shrug* just seems like it would make more sense to block all incoming 'syn' packets. Wouldn't that be faster than inspecting the destination port against two seperate rules? blocking all SYN's will break too much other stuff (Instant Messangers, games ...). I think we would be much better

Re: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-19 Thread todd glassey
Glassey - Original Message - From: Christopher L. Morrow [EMAIL PROTECTED] To: Stewart, William C (Bill), RTLSL [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Friday, January 17, 2003 6:29 PM Subject: Re: FW: Re: Is there a line of defense against Distributed Reflective attacks? On Fri

RE: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-19 Thread Ray Burkholder
- From: todd glassey [mailto:[EMAIL PROTECTED]] Sent: January 19, 2003 12:02 To: Christopher L. Morrow; Stewart, William C (Bill), RTLSL Cc: [EMAIL PROTECTED] Subject: Re: FW: Re: Is there a line of defense against Distributed Reflective attacks? You nor any of the ISP's may like

Re: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-18 Thread Daniel Senie
At 09:29 PM 1/17/2003, Christopher L. Morrow wrote: On Fri, 17 Jan 2003, Stewart, William C (Bill), RTLSL wrote: -Original Message- From: Stewart, William C (Bill), RTLSL Sent: Friday, January 17, 2003 5:35 PM To: '[EMAIL PROTECTED]' Subject: Re: Is there a line of defense

Re: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-18 Thread John Kristoff
On Sat, Jan 18, 2003 at 08:58:13AM -0500, Daniel Senie wrote: While it's nice that router vendors implemented unicast RPF to make configuration in some cases easier, using simple ACLs isn't necessarily hard at the edges either. It might be nice if all router vendors were able to associate

Re: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-18 Thread Chris Adams
Once upon a time, John Kristoff [EMAIL PROTECTED] said: It might be nice if all router vendors were able to associate the interface configured address(es)/nets as a variable for ingress filters. So for in the Cisco world, a simple example would be: interface Serial0 ip address

FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-17 Thread Stewart, William C (Bill), RTLSL
-Original Message- From: Stewart, William C (Bill), RTLSL Sent: Friday, January 17, 2003 5:35 PM To: '[EMAIL PROTECTED]' Subject: Re: Is there a line of defense against Distributed Reflective attacks? Many of these attacks can be mitigated by ISPs that do anti-spoofing filtering on