Re: [nsp] DoS tracking

From: Jared Mauch (jared@puck.nether.net)
Date: Wed Feb 09 2000 - 14:46:21 EST


        Cable & Wireless inherited dostracker from InternetMCI.

        I have a copy of it up in my anonymous ftp directory
at ftp://puck.nether.net/pub/jared/

        PLEASE! PLEASE! Source filter your customers. Either with
an ACL, or "ip verify unicast reverse-path". This is available
in all 12.0 software versions.

        - jared

On Wed, Feb 09, 2000 at 02:10:27PM -0500, Scot bethke wrote:
> Tracking is much needed! Didnt Sprint used to offer something to track this
> stuff?
>
> It took Yahoo 3 hours to detect and fix this, are there any tips on how to
> figure this kind of attack out faster, or better yet how to prevent it from
> happening at all?



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:09 EDT