How do you block DDOS ? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Adam Hewitt Sent: Wednesday, 27 November 2002 9:08 To: Minh Van Le Cc: [EMAIL PROTECTED] Subject: Re: [SLUG] I think I'm being DoS'd - What can I do ?
Hi All, I used to work as a network engineer for a large national wholesale ISP, and it was *policy* that we provided bandwidth, *not* filtering. Their philosophy was that if you are being DoS'ed you need to contact the source ISP and get them to block, otherwise we would still get charged for the traffic from our supplier. I can kind of see their point, but it doesn't really help the average end user. Even when code red was running riot, we still did not filter... Adam. On Tue, 2002-11-26 at 11:31, Minh Van Le wrote: > I think I've been DoS'd. And it's still happening. It looks like DrDoS. I > think I'm on some kind of IP database that's used in an attack and also the > target/victim (me) of an attack. > > My guess is some kind of (successful) syn/icmp flood at first. > > After work I came home and tried to use the net. Couldn't get any network > traffic happening. I initially did: > > 1) checked pppd/pppoe, route, ifconfig, ppp0 > 2) checked ADSL modem sync lights > 3) pppstats -w1 ppp0 > -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
