nanog mailing list archives
Re: NAP/ISP Saturation WAS: Re: Exchanges that matter...
From: Tony Li <tli () jnx com>
Date: Fri, 20 Dec 1996 19:23:56 -0800 (PST)
> Indeed. For instance SYN-flood the BGP port. Correct me if I'm wrong but to the best of my recollection, in order for a packet to be accepted on the BGP port, it must be originating from a configured BGP peer. Since the SYN flood method relies on the attack originating from an unreachable (yet routable) address, it would seem that this approach will fail. If you're out for a true DoS attack, it need not even be a SYN attack. Simply flooding the BGP port would be quite enough to bring the system to its knees. Forge a known peer's source address, and even the CPU that it burns testing for authentication and discarding packets would be enough to be fatal. The important point is that you can't distinguish the good from the bad without a whole lot of work. Tony - - - - - - - - - - - - - - - - -
Current thread:
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter..., (continued)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Alex.Bligh (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Jim Van Baalen (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Nathan Stratton (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Paul A Vixie (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Jim Van Baalen (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Tony Li (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Alex.Bligh (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Avi Freedman (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Alex.Bligh (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Ophir Ronen (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Tony Li (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Michael Dillon (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Tony Li (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... David Schwartz (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Alan Hannan (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... David Schwartz (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Brett L. Hawn (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Alan Hannan (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Brett L. Hawn (Dec 20)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Jon Zeeff (Dec 21)
- Re: NAP/ISP Saturation WAS: Re: Exchanges that matter... Michael Dillon (Dec 20)