[prev in list] [next in list] [prev in thread] [next in thread] 

List:       nanog
Subject:    Re: ICMP Attacks???????
From:       "Alex \"Mr. Worf\" Yuriev" <alex () netaxs ! com>
Date:       1997-08-22 1:39:44
[Download RAW message or body]

> Short of fixing every network on the internet, does anyone have any useful
> advice for what to do when smurfed?  This happened to an FDT customer last
> night, and it had our T1 (according to uunet) at about 500% capacity.
> Obviously, until the attack stopped, our T1 wasn't too useful.  I'm about
> >< close to just asking uunet to block all icmp echo replies from coming
> into FDT...but I know customers will complain.

Then they will start blasting UDP at you. Trust me, T1 is not that bad. We
periodically have DS-3s eaten up completely but it happens for such a
short time that it cannot really be traced :(

Alex

[prev in list] [next in list] [prev in thread] [next in thread]