SYN Good Neighbor

• Perform egress filtering on your border routers

• Don’t permit packets to leave if they are not labeled with your IP address as the source

• Especially important if you have a high speed connection!

• We do this at MIT so we are not a good SYN Flood source site