I'd start a pool myself, but I don't have the guts to go up against the DDOSers that seem to run rampant across the pools.
This would probubly deffinalty slow down attackers as they'd have to authenticate every single netbot and if they have 1000000 netbots coming from 1 ip address it will shut them out. Simple as that .
This will be in a couple of months from now after my pooling software is perfect but still a dream i have for the future of pooling services
tell me what you guys think in terms of flaws, and maybe how annoying it might be to authenticate your ip address everytime
Even if you reject packets at your router the DDoS still clogs your incoming bandwidth. It's Denial Of Service - an easy way to deny service is to overload your proposed authentication server, just pass tens of thousands of spurious requests from spoofed IPs and it bogs down, denying service to your users who actually CAN authenticate. One of the only ways to mitigate DDoS today is to have the ISP kill the connections from their gateway - and you have to be a decent size to manage that.
I can actually think of a few ways that cost a bit of money per hour to run that could nearly completely remove DDoS attacks from the pools and front ends specifically, but i'll keep those to myself until someone offers a BTC bounty, since i'm technically in the business of selling such novel solutions.
Xenland - you ever need some quick security advice you know where to find me.
--