[161871] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Cloudflare, and the 120Gbps DDOS "that almost broke the Internet"

daemon@ATHENA.MIT.EDU (Warren Bailey)
Wed Mar 27 17:48:46 2013

From: Warren Bailey <wbailey@satelliteintelligencegroup.com>
To: "surfer@mauigateway.com" <surfer@mauigateway.com>, "nanog@nanog.org"
 <nanog@nanog.org>
Date: Wed, 27 Mar 2013 21:46:05 +0000
In-Reply-To: <20130327145444.A9FF4584@resin11.mta.everyone.net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

Wasn't there a ton of drama with the SpamHaus guys a year or so ago
regarding RBL's on NANOG?



On 3/27/13 2:54 PM, "Scott Weeks" <surfer@mauigateway.com> wrote:

>
>--- bill@herrin.us wrote:
>From: William Herrin <bill@herrin.us>
>
>According to the New York Times it was 300 gbps and Cyberbunker was the
>bad guy.
>http://www.nytimes.com/2013/03/27/technology/internet/online-dispute-becom
>es-internet-snarling-attack.html?pagewanted=3Dall&_r=3D0
>-----------------------------------------
>
>Got a link that we don't have to allow cookies and have to create an
>account to read?
>------------------------------------------------------------
>
>
>I found it using startpage.com's proxy and pasted it below for
>others that don't want to create accounts and all:
>
>
>A squabble between a group fighting spam and a Dutch company that hosts
>Web sites said to be sending spam has escalated into one of the largest
>computer attacks on the Internet, causing widespread congestion and
>jamming crucial infrastructure around the world, John Markoff and Nicole
>Perlroth write on Wednesday in The New York Times.
>
>Millions of ordinary Internet users have experienced delays in services
>like Netflix or could not reach a particular Web site for a short time.
>However, for the Internet engineers who run the global network, the
>problem is more worrisome. The attacks are becoming increasingly
>powerful, and computer security experts worry that if they continue to
>escalate, people may not be able to reach basic Internet services, like
>e-mail and online banking.
>
>The dispute started when the spam-fighting group, called Spamhaus, added
>the Dutch company Cyberbunker to its blacklist, which is used by e-mail
>providers to weed out spam. Cyberbunker, named for its headquarters, a
>five-story former NATO bunker, offers hosting services to any Web site
>=B3except child porn and anything related to terrorism,=B2 according to it=
s
>Web site.
>
>A spokesman for Spamhaus, which is based in Europe, said the attacks
>began on March 19, but had not stopped the group from distributing its
>blacklist.
>
>Patrick Gilmore, chief architect at Akamai Networks, a digital content
>provider, said Spamhaus=B9s role was to generate a list of Internet
>spammers. Of Cyberbunker, he added: =B3These guys are just mad. To be
>frank, they got caught. They think they should be allowed to spam.=B2
>
>Mr. Gilmore said that the attacks, which are generated by swarms of
>computers called botnets, concentrate data streams that are larger than
>the Internet connections of entire countries. He likened the technique,
>which uses a long-known flaw in the Internet=B9s basic plumbing, to using =
a
>machine gun to spray an entire crowd when the intent is to kill one
>person. The so-called distributed denial of service, or DDoS, attacks
>have reached previously unknown magnitudes, growing to a data stream of
>300 billion bits per second.
>
>Questioned about the attacks, Sven Olaf Kamphuis, an Internet activist
>who said he was a spokesman for the attackers, said in an online message
>that, =B3We are aware that this is one of the largest DDoS attacks the
>world had publicly seen.=B2 Mr. Kamphuis said Cyberbunker was retaliating
>against Spamhaus for =B3abusing their influence.=B2
>
>
>scott




home help back first fref pref prev next nref lref last post