[67065] in North American Network Operators' Group
Re: Impending (mydoom) DOS attack
daemon@ATHENA.MIT.EDU (E.B. Dreger)
Sun Feb 1 19:26:37 2004
Date: Mon, 2 Feb 2004 00:26:06 +0000 (GMT)
From: "E.B. Dreger" <eddy+public+spam@noc.everquick.net>
To: nanog@merit.edu
In-Reply-To: <20040131164903.D49417@plutonium.syd.ntt.net.au>
Errors-To: owner-nanog-outgoing@merit.edu
PG> Date: Sat, 31 Jan 2004 17:04:32 +1100 (EST)
PG> From: Phillip Grasso
PG> I've implemented a means of distributing the www.sco.com/32
PG> or any other DDoS destination network block around my own
PG> AS and blocking it by routing to null on the edge routers.
Consider also: Martini tunnels
IIRC, a recent NANOG presentation explained this in greater
detail.
Eddy
--
Brotsman & Dreger, Inc. - EverQuick Internet Division
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 785 865 5885 Lawrence and [inter]national
Phone: +1 316 794 8922 Wichita
_________________________________________________________________
DO NOT send mail to the following addresses :
blacklist@brics.com -or- alfra@intc.net -or- curbjmp@intc.net
Sending mail to spambait addresses is a great way to get blocked.
