Security Basics mailing list archives
RE: managing a SYN flood
From: "Joshua M. Jones" <jjones () isgwichita com>
Date: Mon, 8 Mar 2004 08:49:24 -0600
Log the ip address and call his ISP. Most will suspend or send him a warning message. That's just my $0.02. Josh -----Original Message----- From: Bruyere, Michel [mailto:mbruyere () ezemcanada com] Sent: Thursday, March 04, 2004 8:05 AM To: 'security-basics () securityfocus com' Subject: managing a SYN flood Hi, I know someone that is running a public Game server. He's actually facing a DDOS SYN flood by a player that has been banned from the server because of rules violation. I would like to know if you guys can point me to a good paper on how to mitigate the effect of the attack in order to be able to keep the system up. I don't have physical access to the server and I tried to help him out the best as I could but it would be easier to send him a good paper on the subject. BTW the server is in co-location on a 100mbits link and is running 2k server. I helped him to harden the server a little bit since it was WIDE open to the net. I also gave him the following article to help Windows a bit http://support.microsoft.com/default.aspx?scid=kb;en-us;142641&Product=w in20 00 http://support.microsoft.com/default.aspx?scid=kb;en-us;315669&Product=w in20 00 It helped somewhat but the server is still unable to deal with the flood. If you want more info ill be glad to give it out. Thx for your inputs M.Bruyere Network/systems administrator CompTIA A+, Network+ ------------------------------------------------------------------------ --- Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off any course! All of our class sizes are guaranteed to be 10 students or less to facilitate one-on-one interaction with one of our expert instructors. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. Visit us at: http://www.infosecinstitute.com/courses/ethical_hacking_training.html ------------------------------------------------------------------------ ---- --------------------------------------------------------------------------- Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off any course! All of our class sizes are guaranteed to be 10 students or less to facilitate one-on-one interaction with one of our expert instructors. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. Visit us at: http://www.infosecinstitute.com/courses/ethical_hacking_training.html ----------------------------------------------------------------------------
Current thread:
- managing a SYN flood Bruyere, Michel (Mar 04)
- Re: managing a SYN flood JGrimshaw (Mar 04)
- Re: managing a SYN flood nick (Mar 08)
- RE: managing a SYN flood David Gillett (Mar 08)
- <Possible follow-ups>
- Re: managing a SYN flood H Carvey (Mar 04)
- RE: managing a SYN flood Joshua M. Jones (Mar 08)
- RE: managing a SYN flood Aditya, ALD [Aditya Lalit Deshmukh] (Mar 10)