On Dec 10, 2013, at 12:38 AM, Rolf Hanßen <[email protected]> wrote:
> I am thinking about dropping some (mainly ddos) traffic on the outside > network borders with ACLs. ACLs don't work well as a DDoS reaction mechanism. They're good for protecting your network infrastructure: <https://app.box.com/s/osk4po8ietn1zrjjmn8b> S/RTBH is much better as a DDoS reaction mechanism: <https://app.box.com/s/xznjloitly2apixr5xge> All the caveats folks have noted about ACLs hold true. ----------------------------------------------------------------------- Roland Dobbins <[email protected]> // <http://www.arbornetworks.com> Luck is the residue of opportunity and design. -- John Milton _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
