That's what I've done... stops it in about 1 minute, but at the expense
of traffic flowing.
On 1/20/21 8:36 PM, Zach Underwood wrote:
In that case you really only have one option announce a black hole to
your upstreams and complete the ddos attack.
On Wed, Jan 20, 2021, 8:20 PM Matt Hoppes
<mattli...@rivervalleyinternet.net
<mailto:mattli...@rivervalleyinternet.net>> wrote:
In this case they overwhelmed our circuit... and it was destined to the
CGNAT box NAT IP.
On 1/20/21 7:39 PM, Zach Underwood wrote:
> If you have enough to bring the good and attack traffic into your
> network the arbor boxes can filter out all of the attack traffic
allow
> the ip and it's traffic to stay online.
>
> On Wed, Jan 20, 2021, 7:28 PM Chuck McCown via AF
<af@af.afmug.com <mailto:af@af.afmug.com>
> <mailto:af@af.afmug.com <mailto:af@af.afmug.com>>> wrote:
>
> What does that do?
>
> Sent from my iPhone
>
>> On Jan 20, 2021, at 5:04 PM, Zach Underwood
<zunder1...@gmail.com <mailto:zunder1...@gmail.com>
>> <mailto:zunder1...@gmail.com <mailto:zunder1...@gmail.com>>>
wrote:
>>
>>
>> If you have bandwidth send all of the traffic into an arbor
box. I
>> have seen them do some amazing things.
>>
>>
>>
>> Disclaimer I use to for work for arbor/netscout but I am no
longer
>> there.
>>
>> On Wed, Jan 20, 2021, 6:56 PM Matt Hoppes
>> <mattli...@rivervalleyinternet.net
<mailto:mattli...@rivervalleyinternet.net>
>> <mailto:mattli...@rivervalleyinternet.net
<mailto:mattli...@rivervalleyinternet.net>>> wrote:
>>
>> Any ideas how to mitigate DDOS attacks when you’re on CGNAT
>> with maybe 100 people behind one IP concentrator?
>> --
>> AF mailing list
>> AF@af.afmug.com <mailto:AF@af.afmug.com> <mailto:AF@af.afmug.com
<mailto:AF@af.afmug.com>>
>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>
>> --
>> AF mailing list
>> AF@af.afmug.com <mailto:AF@af.afmug.com> <mailto:AF@af.afmug.com
<mailto:AF@af.afmug.com>>
>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
> --
> AF mailing list
> AF@af.afmug.com <mailto:AF@af.afmug.com> <mailto:AF@af.afmug.com
<mailto:AF@af.afmug.com>>
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
>
--
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com
