[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] UDP Denial of Service
- Subject: Re: [cobalt-security] UDP Denial of Service
- From: "Kevin D" <kdlists@xxxxxxxxxxxxxxx>
- Date: Mon, 17 Sep 2001 14:24:38 -0400
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
From: "Mark Anderson" <cronus@xxxxxx>
> I administer a RAQ3 and it is being 'packeted' for some
> unknown reason. Has anyone on a RAQ had any experience
> with a denial of service (perhaps a distributed one) that might
> be able to help ?
There's only one way to defeat a true DDoS: filter upstream. What kind of
attack is it? ICMP ping? SYN flood? Try to determine some commonality
between the DoS packets and work with your upstream provider to filter those
packets.
Kevin