Re: DoS help

[Thomas M Carlsson <thomas () carlsson fm>]

On 08/11/2010 23:05, RandallM wrote:
> Well...the Echo request hit again our IP block address using another
> IP (both from FR.), the first hits were morning, second wer about two
> hours of it in the afternoon (I've never experienced where it hit the
> whole damn thing X.X.X.255)

I assume this e-mail was intended as a joke (this being funsec etc), but
I'll bite just in case someone who actually has this problem runs into
the thread on Google;

Above scenario is indicative of a network being an intermediary in a UDP
broadcast amplification attack, i.e. fraggle. See
http://www.lmgtfy.com/?q=fraggle+attack

Thomas/Beige

-- 
  Thomas Mannfred Carlsson
  mail () thomascarlsson com
  SMS: +35-850-07-07-850
  PGP Key ID: 0x69570687
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.