Patent ID: 7301899

Claim:
A method for preventing bandwidth congestion on a network, said method comprising: providing a destination site router connected to a destination site locally and also to an Internet connection; providing a plurality of origin site routers one or many of which may be connected to an attacking site, wherein each of said plurality of origin site routers has a respective address associated with it; providing connectivity between said origin and destination site routers to the Internet or other wide area networks (WAN), but allowing addresses not corresponding to said attacking site access to the Internet or other WAN; detecting a bandwidth congestion at said destination site router, wherein said bandwidth congestion originates at said attacking site; informing said origin site router and other intermediate routers within the Internet, or other WAN, of said bandwidth congestion and of an attacking address corresponding to said attacking site from which said bandwidth congestion originated, wherein said attacking address is determined from a request packet received from said attacking site; preventing said attacking address corresponding to said attacking site from being used to gain access to the Internet or other WAN.