[39512] in North American Network Operators' Group
Re: DDoS attacks
daemon@ATHENA.MIT.EDU (Christopher L. Morrow)
Thu Jul 12 14:16:29 2001
Date: Thu, 12 Jul 2001 14:09:27 -0400 (EDT)
From: "Christopher L. Morrow" <chris@UU.NET>
To: Jon Mansey <jon@interpacket.net>
Cc: John Fraizer <nanog@Overkill.EnterZone.Net>,
"Jon O ." <jono@microshaft.org>, nanog@merit.edu
In-Reply-To: <a05100356b77390f53be8@[192.168.4.223]>
Message-ID: <Pine.GSO.4.20.0107121408250.29147-100000@csserve0.corp.us.uu.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
Jon,
Perhaps when you have an attack, as you do quite often, you should call
our support number?? There is no reason we can't filter/block this traffic
for you...
If you have a ticket for the incident in question I'd be happy to look
into this.
--Chris
(chris@uu.net)
#######################################################
## UUNET Technologies, Inc. ##
## Manager ##
## Customer Router Security Engineering Team ##
## (W)703-289-8479 (C)703-338-7319 ##
#######################################################
On Thu, 12 Jul 2001, Jon Mansey wrote:
>
> At 11:54 PM -0400 7/11/01, John Fraizer wrote:
> >On Wed, 11 Jul 2001, Jon O . wrote:
> >
> >> This is pathetic. Someone asks for help and you demean them with jokes.
> >
> >Who was joking? I wasn't. I suppose that we should all start posting
> >"HELP ME!" posts to NANOG instead of sending an email to/calling the NOC
> >of networks with which we are having issues with DIRECTLY.
>
> snip
>
> Have you ever tried emailing or calling the NOC of a Korean NSP for assistance?
>
> We recently ahem, "entertained" a huge (100Kpps +) DDOS from Korean
> IPs. Even UUnet couldnt block it. We lost that $30k/m customer.
>
> Anyone have the email address for the KrNOG list :-)
>
> jm
>
> unsnip
>
> >All the
> >original poster did was add to the impact of the attack in question. The
> >attackers can now say, "Look! We kicked SO MUCH BUTT THAT THEY HAD TO GO
> >WHINE ON NANOG! WE RULE!"
> >
> >> your own network. However, I'm concluding from the type of behavior
> >> displayed that most of you manage nothing larger than a couple T-1s.
> >
> >Think what you like. I'm sure it isn't the first you've been wrong and
> >most likely won't be the last.
> >
> >>
> >> There is no solution to this problem.
> >
> >OK. No solution? If that is the case, why are you wasting your time
> >posting about it?
> >
> >> ...ACT AS YOU WOULD LIKE TO BE TREATED.
> >
> >If I had posted the message the original poster did, I would have FULLY
> >expected to be blasted/flamed/laughed at. What is your point?
> >
> >>Both of you are in my shitheads for life book and the only way to get out
> >>is to apologize to the poster, CC: nanog and ask a good question about
> >>the attacks so that we might all learn something.
> >
> >The last time I checked, direct attacks and the use of foul language were
> >both in violation of the NANOG AUP (Item #4). I believe it is YOU who
> >owes an apology. [Note: Get him Sue!]
> >
> >
> >---
> >John Fraizer
> >EnterZone, Inc
>
>