Home page logo

nanog logo nanog mailing list archives

RE: The impending DDoS storm
From: Jason Frisvold <friz () corp ptd net>
Date: Wed, 13 Aug 2003 10:50:11 -0400

On Wed, 2003-08-13 at 10:14, Ingevaldson, Dan (ISS Atlanta) wrote:
It might be somewhat tricky to block TCP/80 going to windowsupdate.com.

I agree... but then, who needs updates anyways.. *grin*

Daniel Ingevaldson
Engineering Manager, X-Force R&D
dsi () iss net 
Internet Security Systems, Inc.
The Power to Protect

-----Original Message-----
From: Stephen J. Wilcox [mailto:steve () telecomplete co uk] 
Sent: Wednesday, August 13, 2003 10:38 AM
To: Jason Frisvold
Cc: nanog () merit edu
Subject: Re: The impending DDoS storm

On Wed, 13 Aug 2003, Jason Frisvold wrote:


    What is everyone doing, if anything, to prevent the apparent
DDoS attack against Microsoft?  From what I've been reading, and what 
I've been told, August 16th is the apparent start date...

    We're looking for some solution to prevent wasting our network 
resources transporting this traffic, but at the same time trying to 
allow legitimate through...

    So, is anyone planning on doing anything?

See previous discussion on filtering...

Other than that experience says if these things turn out to be big
enough to 
cause an issue then they quickly burn themselves out anyway

Jason H. Frisvold
Backbone Engineering Supervisor
Penteledata Engineering
friz () corp ptd net
RedHat Engineer - RHCE # 807302349405893
Cisco Certified - CCNA # CSCO10151622
MySQL Core Certified - ID# 205982910
"Imagination is more important than knowledge.
Knowledge is limited. Imagination encircles
the world."
      -- Albert Einstein [1879-1955]

Attachment: signature.asc
Description: This is a digitally signed message part

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]