nanog mailing list archives
Re: Proactive steps to prevent DDOS?
From: Valdis.Kletnieks () vt edu
Date: Fri, 26 Jan 2001 23:54:11 -0500
On Fri, 26 Jan 2001 16:40:04 PST, Sean Donelan said:
Most are suggestions for what other networks can do to prevent them from being a source of a DDOS attack. There is less help for what the target of a DDOS can do.
Unfortunately, the current draft document for the Center for Internet Security (www.cisecurity.org) Solaris security checklist suffers from the same problem. It mandates RFC2644 broadcasts, RFC1918 martian and RFC2827 egress filtering, but I couldn't find any stuff on the victim end of it. If anybody can provide me with a good reference, I'll be happy to add it and give credit. http://www.sans.org/dosstep/index.htm is what I have currently on filtering. If you have a *partial* reference (something that will work for *many* or *most* sites, for example), I am able to phrase it as "Evaluate the techniques listed at <URL> for appropriateness". Anybody got input to add? Valdis Kletnieks Operating Systems Analyst Virginia Tech
Current thread:
- Re: Proactive steps to prevent DDOS?, (continued)
- Re: Proactive steps to prevent DDOS? Sean Donelan (Feb 24)
- Re: Proactive steps to prevent DDOS? Elizabeth Schwartz (Feb 24)
- Re: Proactive steps to prevent DDOS? Jeff Ogden (Feb 24)
- Re: Proactive steps to prevent DDOS? Dave Curado (Feb 24)
- Re: Proactive steps to prevent DDOS? Hank Nussbacher (Feb 24)
- Re: Proactive steps to prevent DDOS? Jeff Ogden (Feb 24)
- Re: Proactive steps to prevent DDOS? David Harmelin (Feb 24)
- Re: Proactive steps to prevent DDOS? Adam Rothschild (Feb 24)
- Re: Proactive steps to prevent DDOS? Sean Donelan (Feb 24)
- Re: Proactive steps to prevent DDOS? Adrian Chadd (Feb 24)
- Re: Proactive steps to prevent DDOS? Valdis . Kletnieks (Feb 24)
- RE: Proactive steps to prevent DDOS? Chin Wey Jake (Feb 24)
- Re: Proactive steps to prevent DDOS? Jerry Scharf (Feb 24)
- Re: Proactive steps to prevent DDOS? Howard C. Berkowitz (Feb 24)
- Re: Proactive steps to prevent DDOS? Valdis . Kletnieks (Feb 24)