Re: Securing Border Routers

2011-01-20 Thread Roland Dobbins
On Jan 19, 2011, at 6:35 PM, Brandon Kim wrote: > I'm concerned about DDOS attacks mainlyalthough we haven't had any, I > don't welcome them. ---

Re: Securing Border Routers

2011-01-20 Thread virendra rode
Hi - On 01/19/2011 04:35 PM, Brandon Kim wrote: Gents: What measures do you take to protect your border routers? Our routers are running BGP so I'm interested if there is any way to secure them without interfering with BGP? Is it normal to put a firewall in front of the border routers? I'm

Re: Securing Border Routers

2011-01-19 Thread Owen DeLong
;> >> >> What an insightful link! Thank you, I am reading it now. >> >> >> >> >>> From: bryan.we...@arrisi.com >>> To: nanog@nanog.org >>> Date: Wed, 19 Jan 2011 16:38:43 -0800 >>> Subject: RE: Securing Border Router

Re: Securing Border Routers

2011-01-19 Thread jim deleskie
n Kim wrote: > > > > What an insightful link! Thank you, I am reading it now. > > > > > > From: bryan.we...@arrisi.com > > To: nanog@nanog.org > > Date: Wed, 19 Jan 2011 16:38:43 -0800 > > Subject: RE: Securing Border Routers > > > &g

RE: Securing Border Routers

2011-01-19 Thread Brandon Kim
What an insightful link! Thank you, I am reading it now. > From: bryan.we...@arrisi.com > To: nanog@nanog.org > Date: Wed, 19 Jan 2011 16:38:43 -0800 > Subject: RE: Securing Border Routers > > I ALWAYS start with the CYMRU secure bgp templates, found here: > http

Re: Securing Border Routers

2011-01-19 Thread Ryan Shea
A stateful firewall outside of your router may create a new bottleneck which increases your risk of DoS. Making sure that you know (and document, and test) how to effectively contact your service providers should you be attacked would be a good idea. Find out if your service providers have BGP comm

RE: Securing Border Routers

2011-01-19 Thread Welch, Bryan
ginal Message- From: Brandon Kim [mailto:brandon@brandontek.com] Sent: Wednesday, January 19, 2011 4:36 PM To: nanog group Subject: Securing Border Routers Gents: What measures do you take to protect your border routers? Our routers are running BGP so I'm interested if there is

Securing Border Routers

2011-01-19 Thread Brandon Kim
Gents: What measures do you take to protect your border routers? Our routers are running BGP so I'm interested if there is any way to secure them without interfering with BGP? Is it normal to put a firewall in front of the border routers? I'm concerned about DDOS attacks mainlyalthough we