[nsp] DoS attack Discussion

[Goldberg Alain (IT)]

 Take a look at http://www.riverhead.com

It does what you need.

Regards,

_________________________________________
Alain Goldberg - Network manager - CCDA/CCNA

Tower              Semiconductors           LTD.

Tel : 972-4-6506003   Fax : 972-4-6547788


 
"I love a well designed chaos" - Sixtus dixit


-----Original Message-----
From: M.Palis [mailto:security at cytanet.com.cy] 
Sent: Wednesday, October 15, 2003 1:38 PM
To: cisco-nsp at puck.nether.net
Subject: [nsp] DoS attack Discussion

  Hello all

I need to discuss with you  the way DoS attacks of high amount of
traffic coming through a high Bandwidth backbone to lower bandwidth
interfaces e.g less than 2Mbps are handled.

Some of our customers are facing DoS attacks and routers  where these
customers are connected  are affected too.  I believe this is due  to
the fact that the attack goes through our backbone to the routers  where
low bandwidth customer connection exist. Of course we null0 the affected
IPs but we need a solution that will help the router to handle the
traffic until we recognise the attack and route to null0 the attacked
IPs. Do you use any packet rate-limit on interfaces?

Any advice will be appreciated

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/