From owner-freebsd-security  Mon May 24  7:17:37 1999
Delivered-To: freebsd-security@freebsd.org
Received: from idea.co.uk (ultra2.idea.co.uk [194.36.20.11])
	by hub.freebsd.org (Postfix) with ESMTP id 6ABE314BD3
	for <freebsd-security@freebsd.org>; Mon, 24 May 1999 07:16:14 -0700 (PDT)
	(envelope-from kiril@idea.co.uk)
Received: (from kiril@localhost)
	by idea.co.uk (8.9.2/8.9.2) id PAA02162;
	Mon, 24 May 1999 15:07:14 +0100 (BST)
From: Kiril Mitev <kiril@ideaglobal.com>
Message-Id: <199905241407.PAA02162@idea.co.uk>
Subject: Re: Denial of service attack from "imagelock.com"
To: brett@lariat.org (Brett Glass)
Date: Mon, 24 May 1999 15:07:14 +0100 (BST)
Cc: freebsd-security@freebsd.org
In-Reply-To: <4.2.0.37.19990522171752.04638eb0@localhost> from "Brett Glass" at May 22, 99 05:24:16 pm
X-Mailer: ELM [version 2.4 PL25]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

> 
> At 11:29 AM 5/22/99 -0700, Rodney W. Grimes wrote:
> 
> >Did you even try the simple way:
> 
> <SNIP>
> 
> Yes, I did. Unfortunately, there's no way of telling whether the
> company is what it says it is or why it would have attempted to
> hit the server with so many rapid-fire requests from multiple IP
> addresses. I've been trying to contact the company and hopefully
> we will know soon. However, in the meantime, I'd STRONGLY recommend
> that people firewall its IPs -- 209.133.111/24. At best, they're
> terribly misguided; at worse, they're outright malicious.

3rd option: they/you/both have a slow line, and someone was
in a hurry to suck your whole web site...by running several
copies of a web crawler or something.


i've had to slap people in the wrist for that before :-), since
OUR firewall/proxy starts buckling under such a load....

just my tuppence

Kiril

> 
> --Brett Glass
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message