[60488] in North American Network Operators' Group
RE: The impending DDoS storm
daemon@ATHENA.MIT.EDU (Jason Frisvold)
Wed Aug 13 10:51:21 2003
From: Jason Frisvold <friz@corp.ptd.net>
To: "Ingevaldson, Dan (ISS Atlanta)" <dsi@iss.net>
Cc: "Stephen J. Wilcox" <steve@telecomplete.co.uk>, nanog@merit.edu
In-Reply-To: <226A79C4618AD945B527EA7F475EA2C63210F8@atlmaiexcp01.iss.local>
Date: Wed, 13 Aug 2003 10:50:11 -0400
Errors-To: owner-nanog-outgoing@merit.edu
--=-WEHK9S4u/d3Y1e0aAM4b
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
On Wed, 2003-08-13 at 10:14, Ingevaldson, Dan (ISS Atlanta) wrote:
> It might be somewhat tricky to block TCP/80 going to windowsupdate.com.
I agree... but then, who needs updates anyways.. *grin*
> Regards,
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D
> Daniel Ingevaldson
> Engineering Manager, X-Force R&D
> dsi@iss.net=20
> 404-236-3160
> =20
> Internet Security Systems, Inc.
> The Power to Protect
> http://www.iss.net
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D
>=20
>=20
> -----Original Message-----
> From: Stephen J. Wilcox [mailto:steve@telecomplete.co.uk]=20
> Sent: Wednesday, August 13, 2003 10:38 AM
> To: Jason Frisvold
> Cc: nanog@merit.edu
> Subject: Re: The impending DDoS storm
>=20
>=20
>=20
>=20
> On Wed, 13 Aug 2003, Jason Frisvold wrote:
>=20
> > All,
> >=20
> > What is everyone doing, if anything, to prevent the apparent
> upcoming=20
> > DDoS attack against Microsoft? From what I've been reading, and what=20
> > I've been told, August 16th is the apparent start date...
> >=20
> > We're looking for some solution to prevent wasting our network=20
> > resources transporting this traffic, but at the same time trying to=20
> > allow legitimate through...
> >=20
> > So, is anyone planning on doing anything?
>=20
> See previous discussion on filtering...
>=20
>=20
> Other than that experience says if these things turn out to be big
> enough to=20
> cause an issue then they quickly burn themselves out anyway
>=20
> Steve
--=20
---------------------------
Jason H. Frisvold
Backbone Engineering Supervisor
Penteledata Engineering
friz@corp.ptd.net
RedHat Engineer - RHCE # 807302349405893
Cisco Certified - CCNA # CSCO10151622
MySQL Core Certified - ID# 205982910
---------------------------
"Imagination is more important than knowledge.
Knowledge is limited. Imagination encircles
the world."
-- Albert Einstein [1879-1955]
--=-WEHK9S4u/d3Y1e0aAM4b
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQA/OlAjRsoFMdDaiQgRAnd8AKDmCxLrD02eyhGsza182N9V4ClFBACeKQxp
Ph7C8R5Vh5+rSOIi6v7QzvU=
=N3/S
-----END PGP SIGNATURE-----
--=-WEHK9S4u/d3Y1e0aAM4b--
