<?xml version='1.0'?>

<reference anchor='RFC2267'>

<front>
<title abbrev='Network Ingress Filtering'>Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing</title>
<author initials='P.' surname='Ferguson' fullname='Paul Ferguson'>
<organization>cisco Systems, Inc.</organization>
<address>
<postal>
<street>400 Herndon Parkway</street>
<street>Herndon</street>
<street>VA  USA 20170</street></postal>
<email>ferguson@cisco.com</email></address></author>
<author initials='D.' surname='Senie' fullname='Daniel Senie'>
<organization>BlazeNet, Inc.</organization>
<address>
<postal>
<street>4 Mechanic Street</street>
<street>Natick</street>
<street>MA  USA 01760</street></postal>
<email>dts@senie.com</email></address></author>
<date month='January' year='1998' />
<area>Security</area>
<keyword>attack</keyword>
<abstract>
<t>
   Recent occurrences of various Denial of Service (DoS) attacks which
   have employed forged source addresses have proven to be a troublesome
   issue for Internet Service Providers and the Internet community
   overall.  This paper discusses a simple, effective, and
   straightforward method for using ingress traffic filtering to
   prohibit DoS attacks which use forged IP addresses to be propagated
   from &apos;behind&apos; an Internet Service Provider&apos;s (ISP) aggregation point.
</t></abstract></front>

<seriesInfo name='RFC' value='2267' />
<format type='HTML' octets='32307' target='http://xml.resource.org/public/rfc/html/rfc2267.html' />
<format type='XML' octets='21087' target='http://xml.resource.org/public/rfc/xml/rfc2267.xml' />
</reference>
