nanog mailing list archives
Re: ICANN Targets DDoS Attacks
From: Valdis.Kletnieks () vt edu
Date: Tue, 29 Oct 2002 16:00:06 -0500
On Tue, 29 Oct 2002 12:48:39 PST, Jeff Shultz said:
Smurf.
Okay. What will this do to my user's ping and traceroute times, if anything? I've got users who tend to panic if their latency hits 250ms between here and the moon (slight exaggeration, but only slight). I just love it when I've got people blaming me because the 20th hop on a traceroute starts returning * * * instead of times.
So you rate limit it to several/second or something appropriate for the normal traffic levels. You don't allow ping/traceroute to broadcast addresses. If you have users with that critical a latency requirement, you should ALREADY be doing traffic shaping and rate limiting to help ensure it. You might want to check if your site is listed in any of the usual Smurf-amp databases, and clean things up if you are - being used as a Smurf amp will shoot your latency all to hell.... -- Valdis Kletnieks Computer Systems Senior Engineer Virginia Tech
Attachment:
_bin
Description:
Current thread:
- Re: ICANN Targets DDoS Attacks, (continued)
- Re: ICANN Targets DDoS Attacks Jared Mauch (Oct 29)
- Re: ICANN Targets DDoS Attacks Jeff Shultz (Oct 29)
- Re: ICANN Targets DDoS Attacks Stephen J. Wilcox (Oct 29)
- Re: ICANN Targets DDoS Attacks Jared Mauch (Oct 29)
- ICMP filtering, was Re: ICANN Targets DDoS Attacks Rob Thomas (Oct 29)
- Re: ICMP filtering, was Re: ICANN Targets DDoS Attacks Rafi Sadowsky (Oct 29)
- Re: ICMP filtering, was Re: ICANN Targets DDoS Attacks Rob Thomas (Oct 30)
- Message not available
- Re: ICANN Targets DDoS Attacks Jared Mauch (Oct 29)
- Re: ICANN Targets DDoS Attacks Brett Frankenberger (Oct 29)
- Re: ICANN Targets DDoS Attacks Peter E. Fry (Oct 29)
- Re: ICANN Targets DDoS Attacks Valdis . Kletnieks (Oct 29)
- Re: ICANN Targets DDoS Attacks Jared Mauch (Oct 29)
- RE: ICANN Targets DDoS Attacks fingers (Oct 29)
- Re: ICANN Targets DDoS Attacks bob (Oct 29)
- Re: ICANN Targets DDoS Attacks Jared Mauch (Oct 29)
- Re: ICANN Targets DDoS Attacks Jared Mauch (Oct 29)
- Re: ICANN Targets DDoS Attacks Valdis . Kletnieks (Oct 30)