RE: ddos attacks

[Ahad Aboss <ahad () telcoinabox com>]

Scott,

Use a DDOS detection and mitigation system with DPI capabilities to deal
with traditional DDOS attack and anomalous behaviour such as worm
propagation, botnet attacks and malicious subscriber activity such as
flooding and probing. There are only a few vendors who successfully play in
this space who provide a self healing/self defending system.

Cheers
Ahad
-----Original Message-----
From: sgraun () airstreamcomm net [mailto:sgraun () airstreamcomm net]
Sent: Friday, 2 August 2013 11:37 PM
To: nanog () nanog org
Subject: ddos attacks

I’m curious to know what other service providers are doing to
alleviate/prevent ddos attacks from happening in your network.  Are you
completely reactive and block as many addresses as possible or null0 traffic
to the effected host until it stops or do you block certain ports to prevent
them.  What’s the best way people are dealing with them?

Scott