How are you all handling network attacks from say China? We had attack
today from China Aerospace. RIPE said it was unallocated, ARIN said it
was APNIC, APNIC has no valid info on them. What can one do?
How are you all handling network attacks from say China? We had attack
today from China Aerospace. RIPE said it was unallocated, ARIN said it
was APNIC, APNIC has no valid info on them. What can one do?
Filter the netblocks out of the borders (in)
Null-route their address space (out)
Alex
I've got a new version of the remote-triggered black hole filtering paper.
That is one way of handling the incident.
http://www.ispbook.com/supplements/Remote_Triggered_Black_Hole_Filtering-02.
pdf