RE: any recommendable anti-ddos solution?

[Dereck Martin <dmartin () packetdrivers com>]

I would use an IDS to monitor traffic in real time like "snort_inline".  You can then use signatures to detect certain 
types of exploits, ddos and such.  When it happens it will auto drop, log, and block the connection.  No more denial of 
service attacks from that host =)

For this to work you would setup a transparent bridge between your router and the switch that goes to everything else 
inside the network.  It would then run your inline snort and sniff the data coming across the network.  When a 
signature triggers that you have specified to be blocked, it will do so.

You can also use a front end like base or acid with a mysql backend to visually see people trying to exploit your 
network.  It’s a nice IDS solution.

Search google for stuff like snort inline, Acid and snort, base and snort.  You will find a lot of tutorials.


Dereck Martin
Network Operations Engineer
PacketDrivers IT Outsourcing, LLC
http://www.packetdrivers.com
 ____            _        _   ____       _
|  _ \ __ _  ___| | _____| |_|  _ \ _ __(_)_   _____ _ __ ___
| |_) / _` |/ __| |/ / _ \ __| | | | '__| \ \ / / _ \ '__/ __|
|  __/ (_| | (__|   <  __/ |_| |_| | |  | |\ V /  __/ |  \__ \
|_|   \__,_|\___|_|\_\___|\__|____/|_|  |_| \_/ \___|_|  |___/


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Monty Ree
Sent: Monday, August 27, 2007 11:52 AM
To: security-basics () securityfocus com
Subject: any recommendable anti-ddos solution?

Hello, list.

These days our network has been suffering from various ddos attack(syn
flooding, udp flooding...etc).
from time to time, ddos traffic is over 2G bps and this makes all network
service including firewall and IPS go down..

So is there any recommendable commercial anti-ddos equipment or solution?
I have heard about the cisco guard & detector and many say that only this
can fight against ddos attack. right?

But it seems that other anti ddos solution comes...
Please recommend commercial anti ddos solution for me.


Thanks in advance...

_________________________________________________________________
편리한 웹하드가 최대 1G 까지 무료!
http://im.msn.co.kr/new/function/function_02_11.asp