Re: Are ICMP packets not important for a hosted machine?

2010-10-19 Thread shimi
On Wed, Oct 20, 2010 at 7:00 AM, Shachar Shemesh wrote: > On 19/10/10 20:56, shimi wrote: > > > Mitigating some of a Denial Of Service attack. If a machine replies to ICMP > Echo DoS attack, it doubles the amount of traffic it has to handle. > > Despite an extensivish knowledge in DoS attack type

Re: How to enable ICMP ECHO but still protect against ICMP DoS attacks? [WAS: Are ICMP packets not important for a hosted machine?]

2010-10-19 Thread Shachar Shemesh
On 19/10/10 21:34, Maxim Veksler wrote: Follow up question: ICMP can be used for DoS. Cool. First, let's distinguish between a DoS attack and a DDoS attack. Denial of Service is when there is a bug in the victim's machine, which I can exploit in order to take it out. Send an IP packet to unp

Re: Are ICMP packets not important for a hosted machine?

2010-10-19 Thread Shachar Shemesh
On 19/10/10 20:56, shimi wrote: See inline, On Tue, Oct 19, 2010 at 7:23 PM, Ron Varburg > wrote: A Hosting service is blocking pings from the Internet to the hosted servers. It is possible to ping from the hosted servers to anywhere on the Inter

IBM Job offer: Experienced Software Engineer

2010-10-19 Thread Evgeny Budilovsky
Hi, IBM is looking for experienced programmer who will join development effort in the field of storage systems. We are sitting at Ramat Hahaial, Kiryat Atidim - Tel Aviv (company which was formerly known as Diligent) and developing de-duplication solution

Re: How to enable ICMP ECHO but still protect against ICMP DoS attacks? [WAS: Are ICMP packets not important for a hosted machine?]

2010-10-19 Thread shimi
On Tue, Oct 19, 2010 at 9:34 PM, Maxim Veksler wrote: > Follow up question: > > ICMP can be used for DoS. Cool. > > How does google battle with that? All google services are ping'able (which > is very cool obviously). > > DoSing 10k's (100k's ?) on a worldwide geographically distributed cloud of

How to enable ICMP ECHO but still protect against ICMP DoS attacks? [WAS: Are ICMP packets not important for a hosted machine?]

2010-10-19 Thread Maxim Veksler
Follow up question: ICMP can be used for DoS. Cool. How does google battle with that? All google services are ping'able (which is very cool obviously). How do they protect against the attack?, surly there are enough script kiddies that constantly try to DoS Google. 2010/10/19 shimi > See in

Re: Are ICMP packets not important for a hosted machine?

2010-10-19 Thread shimi
See inline, On Tue, Oct 19, 2010 at 7:23 PM, Ron Varburg wrote: > > > A Hosting service is blocking pings from the Internet to the hosted > servers. > It is possible to ping from the hosted servers to anywhere on the Internet, > assuming that the packets are not dropped somewhere else, ofcourse.

Are ICMP packets not important for a hosted machine?

2010-10-19 Thread Ron Varburg
A Hosting service is blocking pings from the Internet to the hosted servers. It is possible to ping from the hosted servers to anywhere on the Internet, assuming that the packets are not dropped somewhere else, ofcourse. 1. Why would the hosting service bother with such a blockage? 2. Is it reaso

Re: What's up with Bezeq ? Can people please try the following:

2010-10-19 Thread Orna Agmon Ben-Yehuda
I use bezeqint, I am also redirected to google from both sites, and the tracepath is lost for both sites in the same location - 6: bzq-219-189-14.cablep.bezeqint.net (62.219.189.14) 532.665ms asymm 9 7: no reply Orna 2010/10/18 ik > I'm redirected to google: " Run your web applications o