Security Incidents mailing list archives

Re: DOS ATTACK


From: "Alex Lambert" <alambert () webmaster com>
Date: Mon, 28 Oct 2002 21:15:09 -0600

It's not -- it would be coming from each visitor.

Maybe set the page to check the referrer and window.open() to a site
notifying the user of the dirty deeds? Or, if you're not evil, just talk to
the ISP he's using.



apl
----- Original Message -----
From: "james" <jamesh () cybermesa com>
To: "Hunt, Jim" <Jim.Hunt () nwsc k12 in us>
Cc: <incidents () securityfocus com>
Sent: Monday, October 28, 2002 5:31 PM
Subject: Re: DOS ATTACK


Sounds like this attack is coming from a specific IP. Blocking that IP on
a
router
would be one obvious answer.

james
----- Original Message -----
From: "Hunt, Jim" <Jim.Hunt () nwsc k12 in us>
To: <Incidents () securityfocus com>
Sent: Sunday, October 27, 2002 9:59 PM
Subject: DOS ATTACK


I have a friend that has a DOS Attack going on against their website.
It
is being done by someone with a very popular website trying to squash a
little guy.  He is doing it be placing 1 pixel by 1 pixel inline frames in
his webpages and having them load my friends webpage.  It is killing his
server and bandwidth.

What can we do to block?  The Server is W2K with IIS.

Thanks!



--------------------------------------------------------------------------
--
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com




----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: