[4308] in North American Network Operators' Group
Re: SYN floods continueg
daemon@ATHENA.MIT.EDU (Avi Freedman)
Wed Sep 11 16:52:57 1996
From: Avi Freedman <freedman@netaxs.com>
To: ccaputo@alt.net (Chris Caputo)
Date: Wed, 11 Sep 1996 16:48:43 -0400 (EDT)
Cc: nanog@merit.edu
In-Reply-To: <Pine.BSI.3.93.960911132851.14887f-100000@baklava.alt.net> from "Chris Caputo" at Sep 11, 96 01:30:29 pm
> On Wed, 11 Sep 1996, Avi Freedman wrote:
> > and another provider in Philly was attacked for 4-6 hours on news ports
> > (pretty ineffective).
>
> Hi. Why was this ineffective?
>
> Thanks,
> Chris Caputo
> President, Altopia Corporation
Because most providers only let their customers connect to their nnrp/nntp
servers. And you can easily build a filter which allows just port-119
connects from your news peers and denies all others...
Of course, that wouldn't work as well for alt.net (you guys) if you're
still selling off-site nnrp access to hundreds of people.
Avi
