[192546] in North American Network Operators' Group
RE: Syn flood to TCP port 21 from priveleged port (80)
daemon@ATHENA.MIT.EDU (Emille Blanc)
Tue Nov 1 16:29:01 2016
X-Original-To: nanog@nanog.org
From: Emille Blanc <emille@abccommunications.com>
To: Selphie Keller <selphie.keller@gmail.com>
Date: Tue, 1 Nov 2016 13:28:54 -0700
In-Reply-To: <CAAhz9OkC4nRdwZnWHV_K_r2LAG3pYV-epD-QSO7dsUWB0_=Ejg@mail.gmail.com>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
PiBEb2VzIHRoZSBzeW5mbG9vZCBoYXZlIHRjcCBvcHRpb24gaGVhZGVycz8NCg0KTm90IHNlZWlu
ZyBhbnkgaGVyZS4gRnJvbSB0aGlzIG1vcm5pbmcuDQoNCjEyOjQ1OjQ2LjE4MDY2NSAxOTQuNzMu
MTczLjE3LjgwID4gMjE2LjU3LjE4MS4xODkuMjE6IFMgW3RjcCBzdW0gb2tdIDExNTgxNTY0Njc6
MTE1ODE1NjQ2NygwKSB3aW4gODE5MiAoREYpICh0dGwgNjAsIGlkIDE4NDk5LCBsZW4gNDApDQox
Mjo0NTo0Ni4xODA2NjcgMTk0LjczLjE3My4xNy44MCA+IDIxNi41Ny4xODEuMTg5LjIxOiBTIFt0
Y3Agc3VtIG9rXSAxMTU4MTU2NDY3OjExNTgxNTY0NjcoMCkgd2luIDgxOTIgKERGKSAodHRsIDYw
LCBpZCAxODQ5OSwgbGVuIDQwKQ0KMTI6NDU6NDYuMjg0NjE3IDE0MS4xMzguMTI4LjEzNy44MCA+
IDIxNi41Ny4xODIuMTguMjE6IFMgW3RjcCBzdW0gb2tdIDI1OTU3NjY2OTY6MjU5NTc2NjY5Nigw
KSB3aW4gODE5MiAoREYpICh0dGwgNjksIGlkIDY0NzgsIGxlbiA0MCkNCg0KRnJvbTogU2VscGhp
ZSBLZWxsZXIgW21haWx0bzpzZWxwaGllLmtlbGxlckBnbWFpbC5jb21dDQpTZW50OiBOb3ZlbWJl
ci0wMS0xNiAxOjEzIFBNDQpUbzogRW1pbGxlIEJsYW5jDQpDYzogS2VuIENoYXNlOyBPbGVnIEEu
IEFya2hhbmdlbHNreTsgbmFub2dAbmFub2cub3JnDQpTdWJqZWN0OiBSZTogU3luIGZsb29kIHRv
IFRDUCBwb3J0IDIxIGZyb20gcHJpdmVsZWdlZCBwb3J0ICg4MCkNCg0KRG9lcyB0aGUgc3luZmxv
b2QgaGF2ZSB0Y3Agb3B0aW9uIGhlYWRlcnM/DQoNCkkgYW0gc2VlaW5nIHRoaXMgc2FtZSBhY3Rp
dml0eSBhdCBvdXIgZm9yd2FyZCBvYnNlcnZhdGlvbiBzeXN0ZW0sIGhvd2V2ZXIgaXQncyBub3Qg
c2hvd2luZyBhbnkgdGNwIG9wdGlvbnMgbGlrZSBtc3Msc2Fjayx0aW1lc3RhbXBzIGV0Yywgd2Fz
IGN1cmlvdXMgaWYgb3RoZXJzIHdlcmUgc2VlaW5nIHRoZSBzYW1lDQoNCltyb290QG9ha3JpZGdl
LWludGVyY2VwdCh+KV0+IHRjcGR1bXAgLW5uIC1pIGV0aDAgJ3RjcCBhbmQgKHRjcFsxM10gPT0g
MiknDQp0Y3BkdW1wOiB2ZXJib3NlIG91dHB1dCBzdXBwcmVzc2VkLCB1c2UgLXYgb3IgLXZ2IGZv
ciBmdWxsIHByb3RvY29sIGRlY29kZQ0KbGlzdGVuaW5nIG9uIGV0aDAsIGxpbmstdHlwZSBFTjEw
TUIgKEV0aGVybmV0KSwgY2FwdHVyZSBzaXplIDI2MjE0NCBieXRlcw0KDQoxMzowOTozMi43NzI1
MDYgSVAgOTUuMTMxLjE5MC4yMTQuODAgPiA2Ny4yMjAuMjA3LjE2OS4yMTogRmxhZ3MgW1NdLCBz
ZXEgMzU5OTAwNjk4OSwgd2luIDgxOTIsIGxlbmd0aCAwDQoxMzowOTozMi44MDk0NDYgSVAgOTUu
MTMxLjE4NS4xNTAuODAgPiA2Ny4yMjAuMjA3LjE2OS4yMTogRmxhZ3MgW1NdLCBzZXEgMjQwOTkw
OTA3Miwgd2luIDgxOTIsIGxlbmd0aCAwDQoxMzowOTozMy4zMDY3MzcgSVAgMTQxLjEzOC4xMzMu
MTYxLjgwID4gNjcuMjIwLjIwNy4xNjkuMjE6IEZsYWdzIFtTXSwgc2VxIDEwMDY2ODEzMDIsIHdp
biA4MTkyLCBsZW5ndGggMA0KMTM6MDk6MzMuOTQ2NDI3IElQIDE0MS4xMzguMTM0LjE5My44MCA+
IDY3LjIyMC4yMDcuMTcwLjIxOiBGbGFncyBbU10sIHNlcSAzNjI3Mjk1OTQ4LCB3aW4gODE5Miwg
bGVuZ3RoIDANCjEzOjA5OjMzLjk0NjQ2OSBJUCAxNDEuMTM4LjEzNC4xOTMuODAgPiA2Ny4yMjAu
MjA3LjE3MC4yMTogRmxhZ3MgW1NdLCBzZXEgMzYyNzI5NTk0OCwgd2luIDgxOTIsIGxlbmd0aCAw
DQoxMzowOTozNC4yNjM5MDUgSVAgMTk0LjczLjE3My4xMDMuODAgPiA2Ny4yMjAuMjA3LjE3MC4y
MTogRmxhZ3MgW1NdLCBzZXEgMzgxODA0MTkyMCwgd2luIDgxOTIsIGxlbmd0aCAwDQoxMzowOToz
NC40MTU1NTggSVAgMTk0LjczLjE3My4yNDMuODAgPiA2Ny4yMjAuMjA3LjE2OS4yMTogRmxhZ3Mg
W1NdLCBzZXEgMzU4NDQxMDkyOCwgd2luIDgxOTIsIGxlbmd0aCAwDQoNCg0KDQoNCk9uIDEgTm92
ZW1iZXIgMjAxNiBhdCAxMzo1MiwgRW1pbGxlIEJsYW5jIDxlbWlsbGVAYWJjY29tbXVuaWNhdGlv
bnMuY29tPG1haWx0bzplbWlsbGVAYWJjY29tbXVuaWNhdGlvbnMuY29tPj4gd3JvdGU6DQpEaXR0
by4gU2FtZSBzb3VyY2VzOyAxNDEuMTM4LjEyOC4wLzIxPGh0dHA6Ly8xNDEuMTM4LjEyOC4wLzIx
PiBhbmQgOTUuMTMxLjE4NC4wLzIxPGh0dHA6Ly85NS4xMzEuMTg0LjAvMjE+IChnaXZlIG9yIHRh
a2UpLg0KDQpPdXQgb2YgMTAwMCBwYWNrZXQgc2FtcGxlIHRha2VuIGF0IDEyOjQ1OjQ2IFBEVCAo
MTk6NDU6NDYgVVRDKSBhdCBib3VuZGFyeSwgNTAyIHVuaXF1ZSBzb3VyY2VzIHRvIDEwIGRlc3Rp
bmF0aW9uIGhvc3RzIG9uIG91ciBBUy4NCg0KT2JsaWdhdG9yeSBkYXRhIHNob3VsZCB0aGlzIGJl
IG9mIHVzZSB0byBhbnlvbmUgbGlzdGVuaW5nIGluLg0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2Ut
LS0tLQ0KRnJvbTogTkFOT0cgW21haWx0bzpuYW5vZy1ib3VuY2VzQG5hbm9nLm9yZzxtYWlsdG86
bmFub2ctYm91bmNlc0BuYW5vZy5vcmc+XSBPbiBCZWhhbGYgT2YgS2VuIENoYXNlDQpTZW50OiBO
b3ZlbWJlci0wMS0xNiAxMjoyOSBQTQ0KVG86IE9sZWcgQS4gQXJraGFuZ2Vsc2t5DQpDYzogbmFu
b2dAbmFub2cub3JnPG1haWx0bzpuYW5vZ0BuYW5vZy5vcmc+DQpTdWJqZWN0OiBSZTogU3luIGZs
b29kIHRvIFRDUCBwb3J0IDIxIGZyb20gcHJpdmVsZWdlZCBwb3J0ICg4MCkNCg0Kc2VlaW5nIGFu
IGF3ZnVsIGxvdCBvZiBwb3J0IDgwIGhpdHRpbmcgcG9ydCAyMS4gKFdoeSB3b3VsZCBwb3J0IDgw
DQpldmVyIGJlIHVzZWQgYXMgc291cmNlPykuIEFsc28gc2F3IGEgYnVuY2hhIGNwYW5lbCAiRkFJ
TEVEOiBGVFAiIGFsZXJ0cyBmbGlja2VyaW5nDQpvbiBhbmQgb2ZmIGFzIHRoZSBzZXJ2aWNlIHRo
cm90dGxlZCBpdHNlbGYgYXQgYSBjb3VwbGUgY2xpZW50IHNpdGVzIEkgbWFuYWdlLg0KDQpJIHNl
ZSA1NDAgdW5pcXVlIHNvdXJjZSBJUHMgaGl0dGluZyAzMiBkZXN0aW5hdGlvbnMgb24gbXkgbmV0
d29yayBpbiBqdXN0IDEwMDANCnBhY2tldHMgZHVtcGVkIG9uIG9uZSByb3V0ZXIuDQoNCkFsbCBm
cm9tIG11bHRpcGxlIHNlcXVlbnRpYWwgcmVnaXN0ZXJlZCAvMjRzIGluIHdob2lzLCBidXQgYWxs
IGZyb20gb25lDQptYW5hZ2VtZW50IGNvbXBhbnk6DQoNCjE0MS4xMzguMTI4LjAvMjE8aHR0cDov
LzE0MS4xMzguMTI4LjAvMjE+IGFuZCA5NS4xMzEuMTg0LjAvMjE8aHR0cDovLzk1LjEzMS4xODQu
MC8yMT4NCg0Kcm9sZTogICAgICAgICAgIFdpbGxpYW0gSGlsbCBOZXR3b3JrIFNlcnZpY2VzDQph
YnVzZS1tYWlsYm94OiAgbmV0d29ya3NlcnZpY2VzQHdpbGxpYW1oaWxsLmNvLnVrPG1haWx0bzpu
ZXR3b3Jrc2VydmljZXNAd2lsbGlhbWhpbGwuY28udWs+DQphZGRyZXNzOiAgICAgICAgSW5mcmFz
dHJ1Y3R1cmUgU2VydmljZXMgMiBDaXR5IFdhbGsgU3dlZXQgU3RyZWV0IExlZWRzIExTMTEgOUFS
DQoNCkFTNDkwNjENCg0KY291cnNlLCBzeW5mbG9vZHMgY2FuIGJlIHNwb29mZWQuLi4gcGVyaGFw
cyB0aGV5J3JlIGhvcGluZyBmb3IgYSByZXRhbGlhdGlvbg0KYWdhaW5zdCBXSE5TLg0KDQova2MN
Cg0KT24gVHVlLCBOb3YgMDEsIDIwMTYgYXQgMDk6NDQ6MjNQTSArMDMwMCwgT2xlZyBBLiBBcmto
YW5nZWxza3kgc2FpZDoNCiAgPkhlbGxvLA0KICA+DQogID5BIGNvdXBsZSBvZiBjdXRzIGZyb20g
dGNwZHVtcCBvdXRwdXQ6DQogID4NCiAgPjIxOjMxOjU0Ljk5NTE3MCBJUCAxNDEuMTM4LjEzMS4x
MTUuODAgPiAxMDkuNzIuMjQ4LjExNC4yMTogRmxhZ3MgW1NdLCBzZXEgMTM3NjM3OTc2NSwgd2lu
IDgxOTIsIGxlbmd0aCAwDQogID4yMTozMTo1NS4yMzE5MjUgSVAgMTk0LjczLjE3My4xNTQuODAg
PiAxMDkuNzIuMjQxLjE5OC4yMTogRmxhZ3MgW1NdLCBzZXEgMjI1NDc1NjY4NCwgd2luIDgxOTIs
IGxlbmd0aCAwDQogID4yMToyNzo1MC40MTM5MjcgSVAgOTUuMTMxLjE4OC4xNzkuODAgPiAxMDku
NzIuMjQ4LjExNC4yMTogRmxhZ3MgW1NdLCBzZXEgMzYxOTQ3NTMxOCwgd2luIDgxOTIsIGxlbmd0
aCAwDQogID4yMToyNzo1MC40NzcwMTQgSVAgOTUuMTMxLjE5MS43Ny44MCA+IDEwOS43Mi4yNDgu
MTE0LjIxOiBGbGFncyBbU10sIHNlcSAyNDEyNjkwOTgyLCB3aW4gODE5MiwgbGVuZ3RoIDANCiAg
Pg0KICA+RG9lcyBhbnlvbmUgc2VlaW5nIHRoaXMgcmlnaHQgbm93ICgxODozMSBVVEMpPyBJIHNl
ZSB0aGlzIHRyYWZmaWMNCiAgPm9uIGF0IGxlYXN0IHR3byBjb21wbGV0ZWx5IGluZGVwZW5kZW50
IElTUHMgbmVhciBNb3Njb3cuIFRoZQ0KICA+cmF0ZSBpcyBhYm91dCBhIGZldyBkb3plbiBQUFMg
aGl0dGluZyBhbGwgQkdQLWFubm91bmNlZCBuZXR3b3Jrcy4NCiAgPg0KICA+LS0/Pw0KICA+d2Jy
LCBPbGVnLg0KICA+DQogID4iQW5hcmNoeSBpcyBhYm91dCB0YWtpbmcgY29tcGxldGUgcmVzcG9u
c2liaWxpdHkgZm9yIHlvdXJzZWxmLiINCiAgPj8/ID8/ID8/IEFsYW4gTW9vcmUuDQoNCi0tDQpL
ZW4gQ2hhc2UgLSBtYXRoQHNpem9uZS5vcmc8bWFpbHRvOm1hdGhAc2l6b25lLm9yZz4gR3VlbHBo
IENhbmFkYQ0KDQo=
