Re: [Koha] DDoS attack on memcached

2018-03-02 Thread Pablo Bianchi
After reading about Github DDoS incident I found out more about on this Cloudflare post where states: > echo -en "\x00\x00\x00\x00\x00\x01\x00\x00stats\r\n" |

Re: [Koha] DDoS attack on memcached

2018-02-28 Thread Paul A
On 2018-02-28 01:47 PM, Chris Cormack wrote: That will work, however unless you have configured your memcached server to listen on an external IP it will only be listening on localhost. It's worth checking both though. and/or block at border -- there's an up-tick in attempts. In the last few

Re: [Koha] DDoS attack on memcached

2018-02-28 Thread Chris Cormack
That will work, however unless you have configured your memcached server to listen on an external IP it will only be listening on localhost. It's worth checking both though. Chris On 1 March 2018 2:55:56 AM NZDT, Mark Alexander wrote: >Apparently, a bug in memcached (which we use in Koha) cau

[Koha] DDoS attack on memcached

2018-02-28 Thread Mark Alexander
Apparently, a bug in memcached (which we use in Koha) causes it to be used an intermediary in a DDoS attack: https://arstechnica.com/information-technology/2018/02/in-the-wild-ddoses-use-new-way-to-achieve-unthinkable-sizes/ I'm not an expert on this kind of thing by any means, but judging from t