News for hackers. Stuff that matters.
Re:Belgian ISP under 250 Gbps DDoS for days on end by sophacles on Sunday September 19, 2021 @10:52AM (#28584786)
rp_filter (reverse path) does. Problem is it's a leaf(ish) router solution: if the src ip is not in the locally attached subnet, drop it. Not every isp sets this up though, for whatever reason.
Re:Belgian ISP under 250 Gbps DDoS for days on end by MrStonedOne on Sunday September 19, 2021 @01:24PM (#28586106)
limiting your spoofability to ips by the same isp doesn't help, especially since many will have multiple subnets so it won't help your target's ability to filter the packets out