nanog mailing list archives

Re: Which Part(s) Failed in the recent DOS Attacks?


From: Joe Shaw <jshaw () insync net>
Date: Wed, 9 Feb 2000 19:18:26 -0600 (CST)



On 9 Feb 2000, Toplez Razer wrote:

1. Was it the firewall DOS filter?

With packet based DoS attacks, filters don't matter.  Bandwidth and
saturation are what matters.

2. No firewall in Yahoo, EBay, ETrade, etc?

Yes, there are, and no, they wouldn't have helped for the reason
stated above.

3. Firewall DOS filter worked, but the links were still clogged with massive
ACKs/NACKs?

Not exactly, but fairly close.

--
Joseph W. Shaw - jshaw () insync net
Computer Security Consultant and Programmer
Free UNIX advocate - "I hack, therefore I am."






Current thread: