[4526] in North American Network Operators' Group
Re: A modest proposal
daemon@ATHENA.MIT.EDU (Robert E. Seastrom)
Tue Sep 17 21:03:59 1996
Date: Tue, 17 Sep 1996 20:55:24 -0400 (EDT)
From: "Robert E. Seastrom" <rs@bifrost.seastrom.com>
To: michael@memra.com
CC: nanog@merit.edu
In-reply-to: <Pine.BSI.3.93.960917171801.21768H-100000@sidhe.memra.com>
(message from Michael Dillon on Tue, 17 Sep 1996 17:21:07 -0700 (PDT))
From: Michael Dillon <michael@memra.com>
If it only takes 8 SYN packets to lock up a socket for 75 seconds then
effective SYN flood attacks certainly *CAN* be launched from a dialup
connection. And if the definition of an effective attack allows for
intermittently shutting down a socket then effective attacks certainly
*CAN be launched from places like Uruguay, Brazil, Indonesia and so forth.
The kids don't have this much finesse; witness the 2000 packet/sec
attacks recently seen. Look for trouble where there isn't any (yet)
after getting the current problem dealt with, eh?
---Rob
