From owner-freebsd-security  Fri Sep 28 17: 3:11 2001
Delivered-To: freebsd-security@freebsd.org
Received: from mailsrv.otenet.gr (mailsrv.otenet.gr [195.170.0.5])
	by hub.freebsd.org (Postfix) with ESMTP
	id F0AB537B415; Fri, 28 Sep 2001 17:02:46 -0700 (PDT)
Received: from hades.hell.gr (patr530-a031.otenet.gr [212.205.215.31])
	by mailsrv.otenet.gr (8.11.5/8.11.5) with ESMTP id f8T02fR17956;
	Sat, 29 Sep 2001 03:02:41 +0300 (EEST)
Received: (from charon@localhost)
	by hades.hell.gr (8.11.6/8.11.6) id f8S9O0Z44539;
	Fri, 28 Sep 2001 12:24:01 +0300 (EEST)
	(envelope-from charon@labs.gr)
Date: Fri, 28 Sep 2001 12:23:58 +0300
From: Giorgos Keramidas <charon@labs.gr>
To: Igor Podlesny <poige@morning.ru>
Cc: Van Mathers <vm28306@hotmail.com>, freebsd-isp@freebsd.org,
	freebsd-security@freebsd.org
Subject: Re: protect name services from denial of service?
Message-ID: <20010928122357.A44423@hades.hell.gr>
References: <F224lYbvhBISmT6QcWY0000981d@hotmail.com> <1731110523918.20010928105210@morning.ru>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="gBBFr7Ir9EOA20Yy"
Content-Disposition: inline
In-Reply-To: <1731110523918.20010928105210@morning.ru>
User-Agent: Mutt/1.3.22.1i
X-GPG-Fingerprint: C1EB 0653 DB8B A557 3829  00F9 D60F 941A 3186 03B6
X-URL: http://labs.gr/~charon/
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


--gBBFr7Ir9EOA20Yy
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Igor Podlesny <poige@morning.ru> wrote:
>=20
> > I've some FreeBSD based name servers for a government agency.
> > I'd like to develop some Denial of service prevention mechanism.
> > Can anyone recommend configurations or sysctl knobs to turn
> > to assist in DoS type attacks? Any advice or direction welcome
> > here. VM
>=20
> http://www.money-for-nothing.org/

Hmmm, forgive my ignorance.  But what would the ``official Dire Straits
homepage'' have to do with DNS attacks? :-/

-giorgos


--gBBFr7Ir9EOA20Yy
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)

iD8DBQE7tEGt1g+UGjGGA7YRAortAJ4lmbm0hoE/aV751uKPrmkWqc7LpwCgxAMc
65iEnRB9eN89SYqu3XGEusQ=
=MtDL
-----END PGP SIGNATURE-----

--gBBFr7Ir9EOA20Yy--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message