Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 13 Jan 2003 09:23:50 -0500
From:      Richard A Steenbergen <ras@e-gerbil.net>
To:        "."@babolo.ru
Cc:        Josh Brooks <user@mail.econolodgetulsa.com>, Jess Kitchen <jk@burstfire.net>, freebsd-net@FreeBSD.ORG
Subject:   Re: What is my next step as a script kiddie ? (DDoS)
Message-ID:  <20030113142350.GI78231@overlord.e-gerbil.net>
In-Reply-To: <1042331596.782866.69020.nullmailer@cicuta.babolo.ru>
References:  <20030111221206.GF78231@overlord.e-gerbil.net> <1042331596.782866.69020.nullmailer@cicuta.babolo.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Jan 12, 2003 at 03:33:16AM +0300, .@babolo.ru wrote:
> > much less CPU and plenty of places to strike. Protecting your network 
> > infrastructure is certainly the next place to go after you protect your 
> > high-target hosts.
> > 
> > For some examples, see http://www.e-gerbil.net/ras/projects/dos/dos.txt
> remember disposition:
> small net(s) connected via low band (less then 10M)
> link to one upstream.

Obviously if you have a low speed connection, your pipe will fill before
the hosts or routers ever have a chance to fall over (unless you have a
REALLY low end router :P).

But if the point of this discussion is to protect the hosts from falling
over, then the network must be able to deliver a sufficiently large
attack.

And nothing sucks quite like watching a GSR fall over under a 20Mbit SYN 
flood. :)

-- 
Richard A Steenbergen <ras@e-gerbil.net>       http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030113142350.GI78231>