Security Incidents mailing list archives
DoS/DDoS on port 1863(MSN protocol)
From: Diego Sebastián González <dgonzalez () telespazio com ar>
Date: Thu, 23 Sep 2004 13:01:05 -0300
Hi all, I work in an Satellite ISP(teleport) and we are experimenting a Dos/DDoS Attack in our routers on port 1863. Too much SYNs are being sent from a lot of our Public IP Customers to 1863 port to MSN Servers. 10.000 connections per seconds are generated in our TCP accelerators systems, and overflows this system and borders routers. We can identify the customers, but are too much. We cannot drop this port because MSN application uses and we cannot apply policies to our firewalls because the MSN Servers response to SYNs generated from our customers. We have Allot systems that perform filters by IP header, but really, we need to filter by application layer. Anybody has an idea to solve this problem? Tks in advance. Diego S. González Operations Team Telespazio Visit us @ http://www.finmeccanica.it Visit us @ http://www.telespazio.it
Current thread:
- Yahoo Account hacking Freilich, Robert (Sep 20)
- Port 7000 (Apple File Share) DoS/DDoS underway David Gillett (Sep 21)
- Re: Port 7000 (Apple File Share) DoS/DDoS underway Christine Kronberg (Sep 22)
- Re: Port 7000 (Apple File Share) DoS/DDoS underway Daniel Hanson (Sep 22)
- Re: Port 7000 (Apple File Share) DoS/DDoS underway Christine Kronberg (Sep 23)
- Re: Port 7000 (Apple File Share) DoS/DDoS underway Christine Kronberg (Sep 22)
- Re: Port 7000 (Apple File Share) DoS/DDoS underway Chris Krough (Sep 22)
- Re: Port 7000 (Apple File Share) DoS/DDoS underway Chris Krough (Sep 22)
- DoS/DDoS on port 1863(MSN protocol) Diego Sebastián González (Sep 26)
- RE: DoS/DDoS on port 1863(MSN protocol) easternerd (Sep 27)
- Re: DoS/DDoS on port 1863(MSN protocol) Kevin Reardon (Sep 27)
- Re: DoS/DDoS on port 1863(MSN protocol) Tillman Hodgson (Sep 29)
- data payload in SYN (Re: DoS/DDoS on port 1863(MSN protocol)) Martin Mačok (Sep 29)
- Port 7000 (Apple File Share) DoS/DDoS underway David Gillett (Sep 21)
- Re: DoS/DDoS on port 1863(MSN protocol) terry white (Sep 27)
- Re: DoS/DDoS on port 1863(MSN protocol) Martin Mačok (Sep 28)