nanog mailing list archives
Re: router syn/syn-ack/ack alarming...
From: "Mr. Jeremy Hall" <jhall () rex isdn net>
Date: Tue, 17 Sep 1996 16:41:20 -0500 (CDT)
--> -->um... maybe i'm missing the clue here, but if the router vendors add -->something that shuts down an interface if the SYN/SYN-ACK/ACK ratio -->becomes too bad make it *easier* for me if i'm doing a denial of service -->attack on a host? --> -->instead of denying service to a given host, all i have to do is drive -->the router into alarm mode so it shuts off the interface and then i get -->to deny service to an entire segment and everything downstream from that -->segment... --> -->here's to better bang for your cracker-kiddie buck... -->--regis -->> --> That could potentially take out a pop, as each interface goes down due to an attack. -- ------------------------------------------- | Jeremy Hall Network Engineer | | ISDN-Net, Inc Office +1-615-371-1625 | | Nashville, TN and the southeast USA | | jhall () isdn net Pager +1-615-702-0750 | ------------------------------------------- - - - - - - - - - - - - - - - - -
Current thread:
- router syn/syn-ack/ack alarming... Regis Donovan (Sep 17)
- Re: router syn/syn-ack/ack alarming... Alex.Bligh (Sep 17)
- Re: router syn/syn-ack/ack alarming... Mr. Jeremy Hall (Sep 17)
- Re: router syn/syn-ack/ack alarming... Perry E. Metzger (Sep 17)
- Re: router syn/syn-ack/ack alarming... Jeff Young (Sep 17)
- <Possible follow-ups>
- Re: router syn/syn-ack/ack alarming... Vadim Antonov (Sep 17)
- Re: router syn/syn-ack/ack alarming... Paul Ferguson (Sep 18)
- Re: router syn/syn-ack/ack alarming... Guy T Almes (Sep 18)
- Re: router syn/syn-ack/ack alarming... Michael Dillon (Sep 18)
- Re: router syn/syn-ack/ack alarming... Guy T Almes (Sep 18)
- Re: router syn/syn-ack/ack alarming... Justin W. Newton (Sep 18)
- Re: router syn/syn-ack/ack alarming... Vern Paxson (Sep 18)
- Re: router syn/syn-ack/ack alarming... Michael Dillon (Sep 18)
(Thread continues...)