[j-nsp] rpd DDoS?

Joerg Staedele / Trusted Network js at tnib.de
Fri Sep 1 03:35:54 EDT 2006


Leigh Porter wrote:
> Hi,
> 
> Like he said, it didn't crash ;-)
> 
> Joerg, do you have a firewall policy to protect your routing engine? If
> so, I would have thought that this would have suitable protected the
> routing engine if there were a DoS attack.
> 

I have a really paranoid firewall filter to protect the RE. It only
allows BGP from my direct neighbors, icmp is via policer etc. etc.

So i doubt that it was a normal DDoS Attack.

Meanwhile i heard that other members from the INXS expirienced high CPU
usage on their C routers also and lost some BGP Sessions.

-Joerg


More information about the juniper-nsp mailing list