Security Incidents: Re: DoS attack... what to do?

[easternerd <easternerd () gmx net>]

hi,

Could you share with us on all the different measures taken to prevent 
this ?
It would be really useful to the whole list ,
Thank you,

eMail Correspondence:
easternerd () securityrisk org
easternerd () gmx net
Websites:
http://www.securityrisk.org
http://www.cryptography.tk



Paul Laudanski wrote:

> On Tue, 4 Jan 2005, Steve Friedl wrote:
>
>  
>
> > Actually, many ISPs are not terribly happy to "work with you", as "their
> > time" is a resource just as much as their bandwidth is, and this often
> > requires the attention of the most senior people. Customers who repeatedly
> > get DoS'd often find themselves invited to take their business elsewhere.
> >
> >    
> >
> > > Now the question is: Who did you piss off?
> > >      
> > Same thing I asked him :-)
> >    
> One might recall the days when Gaobot was making the rounds last May and 
> some of the websites being DOS's had redirected the traffic to my servers:
> http://news.netcraft.com/archives/2004/05/10/ddos_attacks_hobble_ecommerce_security_sites.html
>
> http://jaguarpc.com did the best they could at the time, but it ultimately 
> led to our switching ISPs to http://applicationx.net.  We continue to get 
> attacked on a daily basis, however, proper measures have been put in place 
> at the current location which made the difference.  Hoorah.
>