nanog mailing list archives
Few questions to the american ISPs [Re: DDOS anecdotes]
From: "Alexei Roudnev" <alex () relcom EU net>
Date: Sat, 23 Jun 2001 11:57:37 -0700
It's nice story, but nothing new except XT/2000 options allowing to generate SRC address. But when (at last) it happen: - use WFQ over all custiomer's links (if you have WFQ no such brute attack succeed, it only slow you down but does not block you); - Cisco force all IP fragments to be queued into the single WFQ query and allow filtering of the FRAGMENTS - any big ISP have skilled security person available. When I worked in Russia, it took 10 - 15 minutes to contact your ISP and install such filters; for EUnet, it took 20 minutes; for TELIA, it was the same. For any amertican ISP, it took a week (UUnet was an exception)... - all cable providers will have src address filters, so preventing src address frauding. It was discussed 5 years ago; it was discussed 2 years ago; it's discussed today. When something change? Alexei Roudnev ----- Original Message ----- From: "Sean M. Doran" <smd () clock org> To: <nanog () merit edu> Sent: Saturday, June 23, 2001 8:30 AM Subject: DDOS anecdotes
Some of you may find http://grc.com/dos/grcdos.htm very interesting. Sean.
Current thread:
- Exodus Down, (continued)
- Exodus Down mike harrison (Jun 23)
- Re: Exodus Down Andy Bradford (Jun 23)
- RE: Exodus Down Matt Levine (Jun 23)
- Re: Exodus Down Roland Dobbins (Jun 23)
- Re: DDOS anecdotes David Howe (Jun 23)
- Re: DDOS anecdotes Jonas Luster (Jun 23)
- RE: DDOS anecdotes Greg A. Woods (Jun 23)
- Re: DDOS anecdotes Christopher A. Woodfield (Jun 23)
- Re: Few questions to the american ISPs [Re: DDOS anecdotes] Christopher A. Woodfield (Jun 23)
- Re: Few questions to the american ISPs [Re: DDOS anecdotes] Pim van Riezen (Jun 23)
- Re: Few questions to the american ISPs [Re: DDOS anecdotes] Steven J. Sobol (Jun 23)
- Re: Few questions to the american ISPs [Re: DDOS anecdotes] Steven J. Sobol (Jun 23)
- Re: Few questions to the american ISPs [Re: DDOS anecdotes] Todd Suiter (Jun 23)
- Re: Few questions to the american ISPs [Re: DDOS anecdotes] Christopher A. Woodfield (Jun 24)
- Re: Few questions to the american ISPs [Re: DDOS anecdotes] E.B. Dreger (Jun 24)
- Re: Few questions to the american ISPs [Re: DDOS anecdotes] Mikael Abrahamsson (Jun 24)
- Re: Few questions to the american ISPs [Re: DDOS anecdotes] Steven J. Sobol (Jun 24)