Home page logo

bugtraq logo Bugtraq mailing list archives

Re: Internet Wide DOS Attack using IRC
From: db () DB NET (Diane Bruce)
Date: Fri, 2 Oct 1998 20:11:38 -0700

Samuel Cossette says:

I have done my own investigation about it;

First it's not Back Orifice, it's another fuck*** trojan, spread by a DCC
With 500 "clones" they can easily split an irc server with the command
MOTD :irc.server.net (.do raw command).

  Funny you should mention this one. I coded up the anti-flood code
for ircd-hybrid-5.3p2. This is exactly why 5.3p2 is out.
It slows down MOTD requests plus some other requests...
Its been sucessful in preventing this attack from working.

-Dianora ircd-hybrid coder/EFnet admin
(for the curious, ftp.blackened.com/pub/irc/hybrid/ircd-hybrid-5.3p2.tar.gz)

Diane Bruce, http://www.db.net/~db  http://www.db.net email db () db net
"Yeah, but it's a great picture of a toaster oven." lathrop at primenet dot com

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]