Re: SYN floods - possible solution?(update)

[Andrew Stesin <stesin @ gu . net>]

On Fri, 13 Sep 1996, Paul Ferguson wrote:

> Date: Fri, 13 Sep 1996 13:04:19 -0400
> From: Paul Ferguson <pferguso @
 cisco .
 com>
> To: Steve Simmons <scs @
 lokkur .
 dexter .
 mi .
 us>
> Cc: firewalls @
 greatcircle .
 com
> Subject: Re: SYN floods - possible solution?(update)
> 
> At 11:41 AM 9/13/96 -0400, Steve Simmons wrote:
> 
> >
> >Yes, if you record the source address you solve this problem.
> 
> Please explain to me how this will solve the problem is the
> source address is non-existent or unreachable.

	... or even if it's a pretty legitimate host and it is
	up, but a) it's source address is forged, b) the host
	itself leaves in some deep corner of the globe
	under slow links.

> 
> - paul
>  
> 
> --
> Paul Ferguson                                           ||        ||
> Consulting Engineering                                  ||        ||
> Reston, Virginia   USA                                 ||||      ||||
> tel: +1.703.716.9538                               ..:||||||:..:||||||:..
> e-mail: pferguso @
 cisco .
 com                         c i s c o S y s t e m s
>