🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.os.ms-windows.nt.admin.networking
Article #129

Re: How to protect against Denial Of Service attacks?

#129
From: Alun Jones
Date: Wed, 20 Sep 2000 02:25
41 lines
3147 bytes
In article <5r3gsso7hs550d0jau5kdqjl12m4mqs1gj@4ax.com>, K.J. Seefried III 
<kseefried@digitalmojo.com> wrote:
> On Mon, 18 Sep 2000 12:01:13 +0400, "Andrew" <andrwoods67@aol.com>
> wrote:
> >>Sam  wrote:
> >>I have heard about Denial of Service attacks on Yahoo, Amazon and
> >>several other popular sites. They all had fallen.
> >>Where can I find a tool to protect my network?
> >You shouls use TCP Shield against such attacks
> 
> Well...no.
> 
> Such tools might work against some types of DoS (e.g. syn flood,
> etc.), but no host based tool will work if your upstream pipe is
> flooded with rubbish, as would be the case with a distributed DoS
> (e.g. TFN, Trinoo, etc.) such as the attacks on Yahoo.

The original poster is a spammer.  Note that, although he styles his posts 
as "Re:", there is no "References" header, and he's careful not to quote a 
message-ID in the attribution.  Do a search on Deja for "TCP Shield", and 
you'll see that he's done this before.

Clearly someone to trust, oh yes [note - that is sarcasm - I wouldn't trust 
a spammer, and wouldn't be at all surprised to hear that TCP Shield is 
another Back Orifice or Netbus in disguise.]

> To the point: if you're on a T-1, and the bad guy has 2000 zombies on
> cable modems asking for http://www.<your site>.com as fast as they
> possibly can, no host-based mechanism will help.  You are off line.

Clearly what he's advertising can't do what it claims - the remaining 
question is merely what it does do.

Alun.
~~~~

--
Texas Imperial Software   | Try WFTPD, the Windows FTP Server. Find us at
1602 Harvest Moon Place   | http://www.wftpd.com or email alun@texis.com
Cedar Park TX 78613-1419  | VISA/MC accepted.  NT-based sites, be sure to
Fax/Voice +1(512)378-3246 | read details of WFTPD Pro for NT.
Technical Details
Message-ID: <OeVx5.25524$SN6.569780@news4.giganews.com>
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-xit-03!supernews.com!newsfeed.direct.ca!look.ca!nntp.giganews.com!nntp3.aus1.giganews.com!news4.giganews.com.POSTED!magnus
References: <8q4i4b$pfc$1@gavrilo.mtu.ru> <5r3gsso7hs550d0jau5kdqjl12m4mqs1gj@4ax.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fa2c1,b94bdb5a8f7b8d75
X-Google-Attributes: gidfa2c1,public
X-Google-Thread: f977f,b94bdb5a8f7b8d75
X-Google-Attributes: gidf977f,public
X-Google-Thread: ff79f,b94bdb5a8f7b8d75
X-Google-Attributes: gidff79f,public
X-Google-ArrivalTime: 2000-09-19 19:26:11 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-xit-03!supernews.com!newsfeed.direct.ca!look.ca!nntp.giganews.com!nntp3.aus1.giganews.com!news4.giganews.com.POSTED!magnus
Newsgroups: comp.os.ms-windows.nt.admin.networking,comp.os.ms-windows.nt.admin.security,fr.comp.os.ms-windows.winnt
From: alun@texis.com (Alun Jones)
Subject: Re: How to protect against Denial Of Service attacks?
Organization: Texas Imperial Software
References: <8q4i4b$pfc$1@gavrilo.mtu.ru> <5r3gsso7hs550d0jau5kdqjl12m4mqs1gj@4ax.com>
X-Newsreader: News Xpress 2.01
Lines: 41
Message-ID: <OeVx5.25524$SN6.569780@news4.giganews.com>
NNTP-Posting-Date: Tue, 19 Sep 2000 21:25:50 CDT
X-Trace: sv2-dOBqTy4ohhvzWkNGEh0vtLQbkFQJv7iZ40eKnrC+ncYxZM+r/p/fnqcRHzwMcaZKAA0GZmxgMqwcdzj!4QwLh50jDY02fqdfUP+3AmHe
X-Complaints-To: abuse@GigaNews.Com
X-Abuse-Info: Please be sure to forward a copy of ALL headers
X-Abuse-Info: Otherwise we will be unable to process your complaint properly
Date: Wed, 20 Sep 2000 02:25:59 GMT