[j-nsp] Decoding DDOS messages
    John Kristoff 
    jtk at depaul.edu
       
    Wed Mar 18 12:16:54 EDT 2020
    
    
  
On Wed, 18 Mar 2020 16:02:09 +0000
Saku Ytti <saku at ytti.fi> wrote:
> It is completely broken, you use 'port' so you expose every port in your system.
Ha, OK thanks.  I think that would require some not so easy spoofing
unless I'm missing something.  We can convert any statement that just
uses port to directional, which I think will require additional rules
to tighten it up.  Feel free to submit example configs.
John
    
    
More information about the juniper-nsp
mailing list