[26159] in North American Network Operators' Group
Question about UDP flooding
daemon@ATHENA.MIT.EDU (=?iso-2022-kr?Q?Jongwon_Kim=28=D1=)
Mon Dec 6 21:50:21 1999
Date: Tue, 7 Dec 1999 11:49:10 +0900 (KST)
From: =?iso-2022-kr?Q?Jongwon_Kim=28=D1=D1_=F1=A3=EA=AA=29?= <knight@streamwk.kix.net>
To: nanog@merit.edu
Message-ID: <Pine.GSO.4.00.9912071123300.26992-100000@streamwk.kix.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
Hi! Everyone.
This is Jongwon Kim from Korea Telecom in seoul ,KOREA.
We have a severe udp flooding form our server as follow.
.Dec 7 10:53:15: %SEC-6-IPACCESSLOGP: list 102 permitted udp 203.234.254.1(43307) -> x.x.x.x(50753), 1 packet
.Dec 7 10:53:16: %SEC-6-IPACCESSLOGP: list 102 permitted udp 203.234.254.1(43422) -> x.x.x.x(42084), 1 packet
.Dec 7 10:53:17: %SEC-6-IPACCESSLOGP: list 102 permitted udp 203.234.254.1(43539) -> x.x.x.x(47889), 1 packet
.Dec 7 10:53:18: %SEC-6-IPACCESSLOGP: list 102 permitted udp 203.234.254.1(43656) -> x.x.x.x(48642), 1 packet
.Dec 7 10:53:19: %SEC-6-IPACCESSLOGP: list 102 permitted udp 203.234.254.1(43773) -> x.x.x.x(60407), 1 packet
.Dec 7 10:53:20: %SEC-6-IPACCESSLOGP: list 102 permitted udp 203.234.254.1(43890) -> x.x.x.x(48339), 1 packet
.Dec 7 10:53:21: %SEC-6-IPACCESSLOGP: list 102 permitted udp 203.234.254.1(44001) -> x.x.x.x(56690), 1 packet
.Dec 7 10:53:22: %SEC-6-IPACCESSLOGP: list 102 permitted udp 203.234.254.1(44117) -> x.x.x.x(18638), 1 packet
.Dec 7 10:53:23: %SEC-6-IPACCESSLOGP: list 102 permitted udp 203.234.254.1(44234) -> x.x.x.x(12099), 1 packet
.Dec 7 10:53:24: %SEC-6-IPACCESSLOGP: list 102 permitted udp 203.234.254.1(44350) -> x.x.x.x(18927), 1 packet
.Dec 7 10:53:25: %SEC-6-IPACCESSLOGP: list 102 permitted udp 203.234.254.1(44467) -> x.x.x.x(61352), 1 packet
We'd like to know how do i limit the udp port use above 40,000 in the host .
Any comment will be appreciated .
TIA
-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
KORNET Network Assistance Manager(Centural O&M Center)
- Voice : 82-2-766-5902 -Fax : 82-2-766-5901
-E-Mail : knight@kix.net
====================================================================
