Article View: comp.os.ms-windows.nt.admin.networking
Article #129Re: How to protect against Denial Of Service attacks?
From: Alun Jones
Date: Wed, 20 Sep 2000 02:25
Date: Wed, 20 Sep 2000 02:25
41 lines
3147 bytes
3147 bytes
In article <5r3gsso7hs550d0jau5kdqjl12m4mqs1gj@4ax.com>, K.J. Seefried III <kseefried@digitalmojo.com> wrote: > On Mon, 18 Sep 2000 12:01:13 +0400, "Andrew" <andrwoods67@aol.com> > wrote: > >>Sam wrote: > >>I have heard about Denial of Service attacks on Yahoo, Amazon and > >>several other popular sites. They all had fallen. > >>Where can I find a tool to protect my network? > >You shouls use TCP Shield against such attacks > > Well...no. > > Such tools might work against some types of DoS (e.g. syn flood, > etc.), but no host based tool will work if your upstream pipe is > flooded with rubbish, as would be the case with a distributed DoS > (e.g. TFN, Trinoo, etc.) such as the attacks on Yahoo. The original poster is a spammer. Note that, although he styles his posts as "Re:", there is no "References" header, and he's careful not to quote a message-ID in the attribution. Do a search on Deja for "TCP Shield", and you'll see that he's done this before. Clearly someone to trust, oh yes [note - that is sarcasm - I wouldn't trust a spammer, and wouldn't be at all surprised to hear that TCP Shield is another Back Orifice or Netbus in disguise.] > To the point: if you're on a T-1, and the bad guy has 2000 zombies on > cable modems asking for http://www.<your site>.com as fast as they > possibly can, no host-based mechanism will help. You are off line. Clearly what he's advertising can't do what it claims - the remaining question is merely what it does do. Alun. ~~~~ -- Texas Imperial Software | Try WFTPD, the Windows FTP Server. Find us at 1602 Harvest Moon Place | http://www.wftpd.com or email alun@texis.com Cedar Park TX 78613-1419 | VISA/MC accepted. NT-based sites, be sure to Fax/Voice +1(512)378-3246 | read details of WFTPD Pro for NT.
Technical Details
Message-ID:
<OeVx5.25524$SN6.569780@news4.giganews.com>Path:
arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-xit-03!supernews.com!newsfeed.direct.ca!look.ca!nntp.giganews.com!nntp3.aus1.giganews.com!news4.giganews.com.POSTED!magnusReferences:
<8q4i4b$pfc$1@gavrilo.mtu.ru> <5r3gsso7hs550d0jau5kdqjl12m4mqs1gj@4ax.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fa2c1,b94bdb5a8f7b8d75 X-Google-Attributes: gidfa2c1,public X-Google-Thread: f977f,b94bdb5a8f7b8d75 X-Google-Attributes: gidf977f,public X-Google-Thread: ff79f,b94bdb5a8f7b8d75 X-Google-Attributes: gidff79f,public X-Google-ArrivalTime: 2000-09-19 19:26:11 PST Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-xit-03!supernews.com!newsfeed.direct.ca!look.ca!nntp.giganews.com!nntp3.aus1.giganews.com!news4.giganews.com.POSTED!magnus Newsgroups: comp.os.ms-windows.nt.admin.networking,comp.os.ms-windows.nt.admin.security,fr.comp.os.ms-windows.winnt From: alun@texis.com (Alun Jones) Subject: Re: How to protect against Denial Of Service attacks? Organization: Texas Imperial Software References: <8q4i4b$pfc$1@gavrilo.mtu.ru> <5r3gsso7hs550d0jau5kdqjl12m4mqs1gj@4ax.com> X-Newsreader: News Xpress 2.01 Lines: 41 Message-ID: <OeVx5.25524$SN6.569780@news4.giganews.com> NNTP-Posting-Date: Tue, 19 Sep 2000 21:25:50 CDT X-Trace: sv2-dOBqTy4ohhvzWkNGEh0vtLQbkFQJv7iZ40eKnrC+ncYxZM+r/p/fnqcRHzwMcaZKAA0GZmxgMqwcdzj!4QwLh50jDY02fqdfUP+3AmHe X-Complaints-To: abuse@GigaNews.Com X-Abuse-Info: Please be sure to forward a copy of ALL headers X-Abuse-Info: Otherwise we will be unable to process your complaint properly Date: Wed, 20 Sep 2000 02:25:59 GMT