Security Incidents mailing list archives

Re: DoS attack... what to do?


From: easternerd <easternerd () gmx net>
Date: Thu, 13 Jan 2005 11:30:38 +0530

hi,

Could you share with us on all the different measures taken to prevent this ?
It would be really useful to the whole list ,
Thank you,

eMail Correspondence:
easternerd () securityrisk org
easternerd () gmx net
Websites:
http://www.securityrisk.org
http://www.cryptography.tk



Paul Laudanski wrote:

On Tue, 4 Jan 2005, Steve Friedl wrote:

Actually, many ISPs are not terribly happy to "work with you", as "their
time" is a resource just as much as their bandwidth is, and this often
requires the attention of the most senior people. Customers who repeatedly
get DoS'd often find themselves invited to take their business elsewhere.

Now the question is: Who did you piss off?
Same thing I asked him :-)

One might recall the days when Gaobot was making the rounds last May and some of the websites being DOS's had redirected the traffic to my servers:

http://news.netcraft.com/archives/2004/05/10/ddos_attacks_hobble_ecommerce_security_sites.html

http://jaguarpc.com did the best they could at the time, but it ultimately led to our switching ISPs to http://applicationx.net. We continue to get attacked on a daily basis, however, proper measures have been put in place at the current location which made the difference. Hoorah.



Current thread: