[j-nsp] Decoding DDOS messages

John Kristoff jtk at depaul.edu
Wed Mar 18 12:16:54 EDT 2020


On Wed, 18 Mar 2020 16:02:09 +0000
Saku Ytti <saku at ytti.fi> wrote:

> It is completely broken, you use 'port' so you expose every port in your system.

Ha, OK thanks.  I think that would require some not so easy spoofing
unless I'm missing something.  We can convert any statement that just
uses port to directional, which I think will require additional rules
to tighten it up.  Feel free to submit example configs.

John


More information about the juniper-nsp mailing list