Firewall Wizards mailing list archives

Re: Recent Attacks


From: "Randy B. Samos" <samos () storage network com>
Date: Fri, 18 Feb 2000 08:57:27 -0600 (CST)


From: "Barrett G. Lyon" <blyon () theshell com>

*snip*

   Is my network disrupted by this attack, and if so should I remove
   whatever it is that the attacker wants offline?  If by removing the
   target will the attacker stop and if so will this keep my other
   services online?   [ I have found by removing the target the attacker
   stops nearly immediately. ]
*snip*

Hmmm. If the object of the attack was a DOS, wouldn't you be helping the
attacker reach his/her goals by taking the machine down yourself?

Randy Samos - IS/SDA                    "Absence of evidence
StorageTek, Minneapolis, MN              is not evidence of
www.stortek.com                          absence." - C. Sagan
randy_samos () storagetek com




Current thread: