Article View: comp.os.ms-windows.nt.admin.networking
Article #128Re: How to protect against Denial Of Service attacks?
From: K.J. Seefried III
Date: Wed, 20 Sep 2000 01:42
Date: Wed, 20 Sep 2000 01:42
28 lines
2501 bytes
2501 bytes
On Mon, 18 Sep 2000 12:01:13 +0400, "Andrew" <andrwoods67@aol.com> wrote: >>Sam wrote: >>I have heard about Denial of Service attacks on Yahoo, Amazon and >>several other popular sites. They all had fallen. >>Where can I find a tool to protect my network? >You shouls use TCP Shield against such attacks Well...no. Such tools might work against some types of DoS (e.g. syn flood, etc.), but no host based tool will work if your upstream pipe is flooded with rubbish, as would be the case with a distributed DoS (e.g. TFN, Trinoo, etc.) such as the attacks on Yahoo. To the point: if you're on a T-1, and the bad guy has 2000 zombies on cable modems asking for http://www.<your site>.com as fast as they possibly can, no host-based mechanism will help. You are off line. I don't want to get off on a rant here (with due credit to Dennis Miller), and I won't. In my personal opinion, absolute prevention of such attacks would require everyone, everywhere to not be vulnerable to hijacking. Not likely, I'm afraid. Something else must be done. Ken Seefried, CTO & Founding Partner, DigitalMoJo Information Security Management, Consulting & Training
Technical Details
Message-ID:
<5r3gsso7hs550d0jau5kdqjl12m4mqs1gj@4ax.com>Path:
arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-xit-03!supernews.com!cyclone-sf.pbi.net!165.113.238.17!pln-w!extra.newsguy.com!lotsanews.com!cyclone.tampabay.rr.com!cyclone.southeast.rr.com!typhoon.southeast.rr.com.POSTED!not-for-mailReferences:
<8q4i4b$pfc$1@gavrilo.mtu.ru>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fa2c1,b94bdb5a8f7b8d75 X-Google-Attributes: gidfa2c1,public X-Google-Thread: ff79f,b94bdb5a8f7b8d75 X-Google-Attributes: gidff79f,public X-Google-Thread: f977f,b94bdb5a8f7b8d75 X-Google-Attributes: gidf977f,public X-Google-ArrivalTime: 2000-09-19 18:43:10 PST Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-xit-03!supernews.com!cyclone-sf.pbi.net!165.113.238.17!pln-w!extra.newsguy.com!lotsanews.com!cyclone.tampabay.rr.com!cyclone.southeast.rr.com!typhoon.southeast.rr.com.POSTED!not-for-mail From: K.J. Seefried III <kseefried@digitalmojo.com> Newsgroups: comp.os.ms-windows.nt.admin.networking,comp.os.ms-windows.nt.admin.security,fr.comp.os.ms-windows.winnt Subject: Re: How to protect against Denial Of Service attacks? Message-ID: <5r3gsso7hs550d0jau5kdqjl12m4mqs1gj@4ax.com> References: <8q4i4b$pfc$1@gavrilo.mtu.ru> X-Newsreader: Forte Agent 1.8/32.548 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Lines: 28 Date: Wed, 20 Sep 2000 01:42:58 GMT NNTP-Posting-Host: 24.163.62.233 X-Complaints-To: abuse@mediaone.net X-Trace: typhoon.southeast.rr.com 969414178 24.163.62.233 (Tue, 19 Sep 2000 21:42:58 EDT) NNTP-Posting-Date: Tue, 19 Sep 2000 21:42:58 EDT Organization: MediaOne - Atlanta