Simple DoS

2007-01-10 Thread Nejc Škoberne
Hello, yesterday one of our clients did something interesting (stupid): they connected both ends of an UTP cable to the same switch, to which our FreeBSD server was also connected. The server was immediately completely unresponsive from yesterday evening until this morning, when our tech guy went

Re: Simple DoS

2007-01-10 Thread Ivan Voras
Nejc Škoberne wrote: > Hello, > > yesterday one of our clients did something interesting (stupid): they > connected both ends of an UTP cable to the same switch, to which our > FreeBSD server was also connected. The server was immediately completely > unresponsive from yesterday evening until this

Re: Simple DoS

2007-01-10 Thread Derek Ragona
Your client caused their own DOS by making it impossible to route network traffic. Basically causing an arp storm. In simple terms, don't do that. Not much you can do with dumb clients, except reward them with a bill for their actions. -Derek At 08:53 AM 1/10/2007, Nejc Škoberne w

Re: Simple DoS

2007-01-10 Thread Howard Jones
Nejc Škoberne wrote: > Any ideas how to prevent such situations in the future? (I would like > to do it on the server side, not on the "user side".) Get a switch that runs Spanning Tree Protocol. I don't think there's much you can do on the server about a problem in the switch.

Re: Simple DoS

2007-01-10 Thread Chuck Swiger
On Jan 10, 2007, at 6:53 AM, Nejc Škoberne wrote: yesterday one of our clients did something interesting (stupid): they connected both ends of an UTP cable to the same switch, to which our FreeBSD server was also connected. [ ... ] Any ideas how to prevent such situations in the future? (I would