nanog mailing list archives

Re: Growing DoS attacks


From: Paul Timmins <paul () timmins net>
Date: Wed, 16 Jan 2002 18:49:48 -0500


What about BGP route flap dampening, people use that, don't they?
-Paul

At 06:12 PM 1/16/2002, you wrote:
Get a box, and run Zebra BGPD, which will announce that /24 to your network.
Then do a script which monitors the traffic to the irc server, and on a
certain threshold, kill BGPD. wait a certain time, like 15minutes or so, and
restart BGPD. It would be nice to check the traffic every minute and if 2
consecutive checks are positive kill bgpd. That mean that you  may be able
to STOP dDoS to irc servers within 2-3 minutes...


Current thread: