Security Basics mailing list archives

Udp Flood


From: Mauro Marazzi <mauro.marazzi () netsystem com>
Date: 4 Nov 2003 23:04:29 -0000



I've tried and tested UDP Flood 2 Foundstone to simulate some attack suffered by my network.Is there any way to block 
an udp flood directed to a Red Hat DNS Server? I could do it on my Cisco router, but I have already implemented some 
rate limits and I could not add any other line. If I will drop the packet directly on the DNS server, will my bandwidth 
in any case used on my POS interface, so reducing the available overall bandwidth? And last, why any UDP flood I have 
received has taken right of way my legal traffic: an example; I have 75 Mbps, and the legitimate traffic is of 70 Mbps. 
When an UDP flood of 20 Mbps(target 53) arrive, it takes 20 Mbps and not the remaining 5 Mbps. So my legitimate traffic 
will be decreased of 15 Mbps.

 

Any reply will be appreciated.

Regards,
Mauro Marazzi

---------------------------------------------------------------------------
Forum Systems PRESIDIO: PGP / XML GATEWAY APPLIANCE
The Presidio integrates PGP data encryption and XML Web Services security to 
simplify the management and deployment of PGP and reduce overall PGP costs 
by up to 80%.
FREE WHITEPAPER & 30 Day Trial - 
http://www.securityfocus.com/sponsor/ForumSystems_security-basics_031027 
----------------------------------------------------------------------------


Current thread: