nanog mailing list archives
Re: Ransom DDoS attack - need help!
From: "Roland Dobbins" <rdobbins () arbor net>
Date: Thu, 10 Dec 2015 13:51:45 +0700
On 10 Dec 2015, at 13:21, Joe Morgan wrote:
We have custom in house software that watches the traffic flows from our edge routers and automatically blackholes any ip getting targeted.
Suggest you take a look at the presos I posted earlier and look into S/RTBH, flowspec, some limited QoS, and some preemptive ACLs so that you aren't forced into completing the DDoS.
----------------------------------- Roland Dobbins <rdobbins () arbor net>
Current thread:
- Re: Ransom DDoS attack - need help!, (continued)
- Re: Ransom DDoS attack - need help! dennis (Dec 03)
- Re: Ransom DDoS attack - need help! Anne Mitchell (Dec 04)
- Re: Ransom DDoS attack - need help! Joe Morgan (Dec 09)
- Re: Ransom DDoS attack - need help! alvin nanog (Dec 09)
- Re: Ransom DDoS attack - need help! Baldur Norddahl (Dec 09)
- Re: Ransom DDoS attack - need help! Baldur Norddahl (Dec 09)
- Re: Ransom DDoS attack - need help! alvin nanog (Dec 09)
- Re: Ransom DDoS attack - need help! Roland Dobbins (Dec 09)
- Re: Ransom DDoS attack - need help! Colin Johnston (Dec 10)
- Re: Ransom DDoS attack - need help! bzs (Dec 10)
- Re: Ransom DDoS attack - need help! Joe Morgan (Dec 09)
- Re: Ransom DDoS attack - need help! Roland Dobbins (Dec 09)
- Re: Ransom DDoS attack - need help! Ian Clark (Dec 10)
- Re: Ransom DDoS attack - need help! Anne Mitchell (Dec 10)
- Re: Ransom DDoS attack - need help! Joe Morgan (Dec 10)
- Re: Ransom DDoS attack - need help! alvin nanog (Dec 10)