[4243] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: SYN floods (was: does history repeat itself?)

daemon@ATHENA.MIT.EDU (Dick St.Peters)
Mon Sep 9 20:35:36 1996

Date: Mon, 9 Sep 1996 20:34:49 -0400
From: "Dick St.Peters" <stpeters@NetHeaven.com>
To: nanog@merit.edu
In-Reply-To: <Pine.QUAD.3.94.960909090923.602A-100000@quad.quadrunner.com>

> So, what does this say?  Look for more 13-year-olds causing
> denial-of-service attacks for the hell of it.  It seems a lot of the
> providers SYN flooders like to attack are the ones which have IRC servers,
> but the flooders attack the more traditional services of those providers,
> too.

My outbound filter blocks packets not from an address in my space.  Am
I wrong in thinking this is the right thing for non-transit networks
to do?

--
Dick St.Peters,       Gatekeeper, Pearly Gateway, Ballston Spa, NY
stpeters@NetHeaven.com     Owner, NetHeaven 518-885-1295/800-910-6671
Albany/Saratoga/Glens Falls/North Creek/Lake Placid/Blue Mountain Lake
	  First Internet service based in the 518 area code

home help back first fref pref prev next nref lref last post