Ingress Filtering is a rather vague concept. The actual application of blocking ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

hhw on March 27, 2013 | parent | context | favorite | on: Global Internet slows after 'biggest attack in his...

Ingress Filtering is a rather vague concept. The actual application of blocking spoofed traffic is known as unicast reverse path forwarding.

http://en.wikipedia.org/wiki/Reverse_path_forwarding

http://tools.ietf.org/html/rfc3704

TranceMan on March 27, 2013 [–]

Thanks - that RFC seems to sum it up: rfc3704

   BCP 38, RFC 2827, is designed to limit the impact of distributed
   denial of service attacks, by denying traffic with spoofed addresses
   access to the network,

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact