[c-nsp] DDoS + ME3600/ME3800

Gert Doering gert at greenie.muc.de
Thu Mar 28 07:07:04 EDT 2013


Hi,

On Thu, Mar 28, 2013 at 10:52:53AM +0000, Nick Hilliard wrote:
> I'm using ACLs at the moment, but would rip them out in an instant if I could.

Amen.  Not on ME3x00, but on Sup720s that need to have loose uRPF on 
other interfaces...  and for IPv6...

(Not that it can be fixed on the Sup720, but I just want to stress the
point of having working uRPF everywhere)

gert

-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 305 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20130328/9c8b2288/attachment.sig>


More information about the cisco-nsp mailing list