Article View: comp.os.ms-windows.nt.admin.networking
Article #130Re: How to protect against Denial Of Service attacks?
From: ade
Date: Tue, 19 Sep 2000 13:32
Date: Tue, 19 Sep 2000 13:32
27 lines
2528 bytes
2528 bytes
Andrew wrote in message <8q4i4b$pfc$1@gavrilo.mtu.ru>... >Re: How to protect against Denial Of Service attacks? > >>Sam wrote: >>I have heard about Denial of Service attacks on Yahoo, Amazon and >>several other popular sites. They all had fallen. >>Where can I find a tool to protect my network? Due to the state of current IP technology there is unfortunately no way you can protect your network from the DDoS attacks you mention. The only thing you can do to help reduce these attacks is to put anti IP address spoofing filters on your border router to stop compromised hosts within your network from flooding other sites if they ever get zombified. The DDoS attacks you mention from what I gather where mainly bandwidth starvation attacks that flooded the pipes and stopped legitimate requests getting through. Because these floods where coming from randomly generated spoofed IPs they where hard to trace and trying to filter them out was a complete nightmare. The IETF is proposing a new type of ICMP message though, which will be generated by routers called itrace which will make it easier to trace the origin of these packet floods but until this is implemented there isn't anything you can do about them. Ade.
Technical Details
Message-ID:
<qbsx5.8348$6T1.118299@news2-win.server.ntlworld.com>Path:
arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-xit-01!supernews.com!novia!feeder.qis.net!btnet-peer!btnet-peer0!btnet!news5-gui.server.ntli.net!ntli.net!news2-win.server.ntlworld.com.POSTED!not-for-mailReferences:
<8q4i4b$pfc$1@gavrilo.mtu.ru>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fa2c1,b94bdb5a8f7b8d75 X-Google-Attributes: gidfa2c1,public X-Google-Thread: f977f,b94bdb5a8f7b8d75 X-Google-Attributes: gidf977f,public X-Google-Thread: ff79f,b94bdb5a8f7b8d75 X-Google-Attributes: gidff79f,public X-Google-ArrivalTime: 2000-09-18 10:22:31 PST Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-xit-01!supernews.com!novia!feeder.qis.net!btnet-peer!btnet-peer0!btnet!news5-gui.server.ntli.net!ntli.net!news2-win.server.ntlworld.com.POSTED!not-for-mail From: "ade" <a.orawe@ntlworld.nospam.com> Newsgroups: comp.os.ms-windows.nt.admin.networking,comp.os.ms-windows.nt.admin.security,fr.comp.os.ms-windows.winnt References: <8q4i4b$pfc$1@gavrilo.mtu.ru> Subject: Re: How to protect against Denial Of Service attacks? Lines: 31 X-Newsreader: Microsoft Outlook Express 4.72.3110.1 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3 Message-ID: <qbsx5.8348$6T1.118299@news2-win.server.ntlworld.com> Date: Tue, 19 Sep 2000 14:32:03 +0100 NNTP-Posting-Host: 213.104.124.207 X-Complaints-To: abuse@ntlworld.com X-Trace: news2-win.server.ntlworld.com 969297750 213.104.124.207 (Mon, 18 Sep 2000 18:22:30 BST) NNTP-Posting-Date: Mon, 18 Sep 2000 18:22:30 BST Organization: ntlworld News Service