Re: Request for contact and procedure information

2009-07-10 Thread Jeffrey Lyon
All, There are few if any ISP that will help you with something like this. Law enforcement also does not have the resources to even begin to look at a single DSL line being attacked unless you can show 7+ figures in damage or some type of major threat to national infrastructure. Your options are

Re: Request for contact and procedure information

2009-07-10 Thread Seth Mattinen
Jeffrey Lyon wrote: All, There are few if any ISP that will help you with something like this. Law enforcement also does not have the resources to even begin to look at a single DSL line being attacked unless you can show 7+ figures in damage or some type of major threat to national

Re: Request for contact and procedure information

2009-07-10 Thread Dan White
Seth Mattinen wrote: Dan White wrote: Have you spoken with your provider? They should be giving you options, like changing your static address, or null routing the attackers upstream, or perhaps blocking port 80 to you, to limit your ingress traffic. For DSL? I've never had that kind

Re: Request for contact and procedure information

2009-07-10 Thread Charles Wyble
I spoke with SBC. 2 hours on the phone (all with US based support which was awesome) came down to e-mail ab...@sbcglobal.net. I'll let everyone know how it goes.

Re: Request for contact and procedure information

2009-07-10 Thread Seth Mattinen
Dan White wrote: Seth Mattinen wrote: Dan White wrote: Have you spoken with your provider? They should be giving you options, like changing your static address, or null routing the attackers upstream, or perhaps blocking port 80 to you, to limit your ingress traffic. For DSL?

Re: Request for contact and procedure information

2009-07-10 Thread Dan White
Seth Mattinen wrote: Dan White wrote: Seth Mattinen wrote: Dan White wrote: Have you spoken with your provider? They should be giving you options, like changing your static address, or null routing the attackers upstream, or perhaps blocking port 80 to you, to limit your

Re: Request for contact and procedure information

2009-07-10 Thread Seth Mattinen
Dan White wrote: Seth Mattinen wrote: Dan White wrote: Seth Mattinen wrote: Dan White wrote: Have you spoken with your provider? They should be giving you options, like changing your static address, or null routing the attackers upstream, or perhaps blocking port 80 to

Re: Request for contact and procedure information

2009-07-10 Thread Christopher Morrow
On Fri, Jul 10, 2009 at 2:11 AM, Jeffrey Lyonjeffrey.l...@blacklotus.net wrote: All, There are few if any ISP that will help you with something like this. coughuunet/vzb would/will/cough (for free most times even)

Re: Request for contact and procedure information

2009-07-10 Thread Jeffrey Lyon
Would what? Null route the IP? I'm talking about actually filtering the attack. Jeff On Jul 10, 2009 5:10 PM, Christopher Morrow morrowc.li...@gmail.com wrote: On Fri, Jul 10, 2009 at 2:11 AM, Jeffrey Lyonjeffrey.l...@blacklotus.net wrote: All, There a... coughuunet/vzb would/will/cough

Re: Request for contact and procedure information

2009-07-10 Thread Christopher Morrow
On Fri, Jul 10, 2009 at 5:12 PM, Jeffrey Lyonjeffrey.l...@blacklotus.net wrote: Would what? Null route the IP? I'm talking about actually filtering the attack. as was I. (talking about filtering the attack) On Jul 10, 2009 5:10 PM, Christopher Morrow morrowc.li...@gmail.com wrote: On Fri,

RE: Request for contact and procedure information

2009-07-10 Thread Luan Nguyen
-- -Original Message- From: Christopher Morrow [mailto:morrowc.li...@gmail.com] Sent: Friday, July 10, 2009 5:40 PM To: Jeffrey Lyon Cc: nanog@nanog.org; Charles Wyble Subject: Re: Request for contact and procedure information On Fri, Jul 10, 2009 at 5:12 PM, Jeffrey Lyonjeffrey.l

Re: Request for contact and procedure information

2009-07-10 Thread Christopher Morrow
Message- From: Christopher Morrow [mailto:morrowc.li...@gmail.com] Sent: Friday, July 10, 2009 5:40 PM To: Jeffrey Lyon Cc: nanog@nanog.org; Charles Wyble Subject: Re: Request for contact and procedure information On Fri, Jul 10, 2009 at 5:12 PM, Jeffrey Lyonjeffrey.l...@blacklotus.net wrote

Re: Request for contact and procedure information

2009-07-10 Thread Jeffrey Lyon
Lyon Cc: nanog@nanog.org; Charles Wyble Subject: Re: Request for contact and procedure information On Fri, Jul 10, 2009 at 5:12 PM, Jeffrey Lyonjeffrey.l...@blacklotus.net wrote: Would what? Null route the IP? I'm talking about actually filtering the attack. as was I. (talking about

Re: Request for contact and procedure information

2009-07-10 Thread Christopher Morrow
[mailto:morrowc.li...@gmail.com] Sent: Friday, July 10, 2009 5:40 PM To: Jeffrey Lyon Cc: nanog@nanog.org; Charles Wyble Subject: Re: Request for contact and procedure information On Fri, Jul 10, 2009 at 5:12 PM, Jeffrey Lyonjeffrey.l...@blacklotus.net wrote: Would what? Null route the IP

Re: Request for contact and procedure information

2009-07-10 Thread Jeffrey Lyon
. (or was when I was doing it there) -chris -- -Original Message- From: Christopher Morrow [mailto:morrowc.li...@gmail.com] Sent: Friday, July 10, 2009 5:40 PM To: Jeffrey Lyon Cc: nanog@nanog.org; Charles Wyble Subject: Re: Request for contact

Re: Request for contact and procedure information

2009-07-10 Thread Henry Linneweh
Charles; SBC belongs to ATT which has a ddos mitigation offering http://www.business.att.com/content/productbrochures/PB-DDoS_16651_v1_6-27-08.pdf Verizon also has such an offering under Managed Services Security Solutions Powered by Cybertrust a company they bought

Re: Request for contact and procedure information

2009-07-09 Thread Jeffrey Lyon
Charles, You're going to need an enterprise grade DDoS protection provider and should expect to spend anywhere from hundreds to thousands per month for this service. This is not a service the majority of transit providers are capable of offering. Best regards, Jeff On Thu, Jul 9, 2009 at 5:35

Re: Request for contact and procedure information

2009-07-09 Thread Mark Price
Turn off your DSL modem for awhile, and hope for a new dynamic IP? Mark On Thu, Jul 9, 2009 at 5:35 PM, Charles Wyblechar...@thewybles.com wrote: All, I'm currently experiencing a DDOS attack on my home DSL connection. Thousands of requests to port 80. I'm on an SBC business class

Re: Request for contact and procedure information

2009-07-09 Thread John Peach
Turn off whatever you have listening on port 80. On Thu, 9 Jul 2009 21:25:48 -0400 Mark Price mpr...@tqhosting.com wrote: Turn off your DSL modem for awhile, and hope for a new dynamic IP? Mark On Thu, Jul 9, 2009 at 5:35 PM, Charles Wyblechar...@thewybles.com wrote: All, I'm

Re: Request for contact and procedure information

2009-07-09 Thread Charles Wyble
I have a static range. :( Mark Price wrote: Turn off your DSL modem for awhile, and hope for a new dynamic IP? Mark

Re: Request for contact and procedure information

2009-07-09 Thread Charles Wyble
I did. Still getting pounded. John Peach wrote: Turn off whatever you have listening on port 80. On Thu, 9 Jul 2009 21:25:48 -0400 Mark Price mpr...@tqhosting.com wrote: Turn off your DSL modem for awhile, and hope for a new dynamic IP? Mark On Thu, Jul 9, 2009 at 5:35 PM, Charles

Re: Request for contact and procedure information

2009-07-09 Thread Adrian Chadd
On Thu, Jul 09, 2009, Charles Wyble wrote: I did. Still getting pounded. And its not covered by your SLA? Adrian

Re: Request for contact and procedure information

2009-07-09 Thread Dan White
Have you spoken with your provider? They should be giving you options, like changing your static address, or null routing the attackers upstream, or perhaps blocking port 80 to you, to limit your ingress traffic. - Dan Charles Wyble wrote: I did. Still getting pounded. John Peach wrote:

Re: Request for contact and procedure information

2009-07-09 Thread William McCall
Dude, he's on SBC man. They're not going to do anything but tell him to restart the modem. On Thu, Jul 9, 2009 at 9:42 PM, Dan Whitedwh...@olp.net wrote: Have you spoken with your provider? They should be giving you options, like changing your static address, or null routing the attackers

Re: Request for contact and procedure information

2009-07-09 Thread Seth Mattinen
Dan White wrote: Have you spoken with your provider? They should be giving you options, like changing your static address, or null routing the attackers upstream, or perhaps blocking port 80 to you, to limit your ingress traffic. For DSL? I've never had that kind of luck with SBC's (now

Re: Request for contact and procedure information

2009-07-09 Thread JC Dill
Good, Fast, Cheap, pick any two. Consumer grade ATT DSL is fast and cheap, and now you realize why Good is not included when you go with Fast and Cheap. jc Charles Wyble wrote: All, I'm currently experiencing a DDOS attack on my home DSL connection. Thousands of requests to port 80. I'm

Re: Request for contact and procedure information

2009-07-09 Thread Jon Kibler
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jon Kibler wrote: Charles Wyble wrote: All, I'm currently experiencing a DDOS attack on my home DSL connection. Thousands of requests to port 80. I'm on an SBC business class account. I'm guessing that calling the regular customer