outgoing DDoS - request for comment :-)

[Sebastian Proba <alterm () O2 PL>]

Hello

The (theoretical) thesis is:

Only effective way to defend big scale DDoS is to filter them at
points close to sources of the DDoS (many streams of DoS packets
originating hacked machines) not at the point close to the target
(some border security system). It seems to be impossible because it
is almost impossible to get - for example - many ISP interested in
identifying and blocking traffic which is outgoing DoS attack. But
there may exist some ways to achieve that kind of cooperation in the
Internet.

what are your opinions? any comments will be appreciated :-)

regards

Sebastian