Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 26 Nov 2007 10:51:23 -0500
From:      "Andresen, Jason R." <jandrese@mitre.org>
To:        "Jeff Mohler" <speedtoys.racing@gmail.com>, "Julian Elischer" <julian@elischer.org>
Cc:        freebsd-hackers@freebsd.org, "Joel V." <joel@smail.ee>
Subject:   RE: Welcome to Hell / Mysterious networking troubles on FreeBSD
Message-ID:  <53B52415C756A84E8A169F0E3673A329909080@IMCSRV6.MITRE.ORG>
In-Reply-To: <a969fbd10711241418g16ca72fbh21bd7de93c6c2757@mail.gmail.com>
References:  <000101c82ed9$4d0986b0$0200a8c0@windsor><4748A0FA.1060402@elischer.org> <a969fbd10711241418g16ca72fbh21bd7de93c6c2757@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
>From: owner-freebsd-hackers@freebsd.org=20
>[mailto:owner-freebsd-hackers@freebsd.org] On Behalf Of Jeff Mohler
>
>On Nov 24, 2007 2:08 PM, Julian Elischer <julian@elischer.org> wrote:
>
>> Joel V. wrote:
>> > Hello.
>> >
>> > A big thanks to everyone who contacted me. FreeBSD really=20
>has the best
>> > community one could help for.
>> >
>> > Now, it has been confirmed by the backbone manager that=20
>we're dealing
>> with a
>> > DDOS attack. However, the ISP seems to be as clueless as a
headless
>> sheep,
>> > and we haven't been able to contact their technical staff=20
>yet (of course
>> one
>> > can't be 100% sure that they even have a technical staff,=20
>judging by the
>> > level of their response).
>> >
>> > Hopefully the situation will be fixed soon. One final=20
>question though:
>> are
>> > there any quick steps one can take to protect their server=20
>from DDOS
>> attacks
>> > like these?
>>
>
>Well..call the people responsible for the source IP, complain=20
>to them as
>well.

However, it's important to remember that those are UDP messages, so it
is trivial to spoof the source address.  They could easily be coming
from hundreds of different hosts but all have the same src address set.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?53B52415C756A84E8A169F0E3673A329909080>