Re: Input requested for second edition of "Firewalls and InternetSecurity"

2002-10-21 Thread batz
As to whether ISP's should install firewalls at every external Internet connection, I think the question would be more appropriately phrased as: Should ISP's have policy enforcement mechanisms at every gateway? The answer to this is "Yes". Much of the problem that exists right now can be attri

root servers DDoS

2002-10-21 Thread Petri Helenius
Anyone have insight into the (seemingly) DoS attack on root-servers which started around 20 UTC and widened to more servers on 20:35 UTC? Not that it´s causing any serious operational problems but slows down things a lot. Pete

Re: root servers DDoS

2002-10-21 Thread Sean Donelan
On Tue, 22 Oct 2002, Petri Helenius wrote: > Anyone have insight into the (seemingly) DoS attack on root-servers which > started around 20 UTC and widened to more servers on 20:35 UTC? > > Not that it´s causing any serious operational problems but slows down things a > lot. You can see pretty gra

Re: root servers DDoS

2002-10-21 Thread Peter Salus
That's root-servers.org, Sean. Peter

Re: root servers DDoS

2002-10-21 Thread Petri Helenius
>You can see pretty graphs of the server performance at > >http://www.root-servers.net/ >http://www.cymru.com/DNS/dns.html I´ve prettier graphs. I sent the mail after the performance started lacking asking if anyone has an idea what´s going on and where the traffic is originating. Pete

Re: root servers DDoS

2002-10-21 Thread Sean Donelan
On Tue, 22 Oct 2002, Petri Helenius wrote: > I´ve prettier graphs. I sent the mail after the performance started lacking > asking if anyone has an idea what´s going on and where the traffic is > originating. Best guess, its a smurf attack. Networks which still have ip directed-broadcast (or your

Re: The power of water

2002-10-21 Thread Crist J. Clark
On Sun, Oct 20, 2002 at 12:22:50 -0400, Howard C. Berkowitz wrote, > 3. Consider putting data centers not in the ground floor on the basement, > but not too high either. Sean, I believe, knows the specific NFPA rule, > but IIRC you can't have a UPS with acid electrolyte above the third fl

Re: The power of water

2002-10-21 Thread David Lesher
Unnamed Administration sources reported that Crist J. Clark said: > > > On Sun, Oct 20, 2002 at 12:22:50 -0400, Howard C. Berkowitz wrote, > > 3. Consider putting data centers not in the ground floor on the basement, > > but not too high either. Sean, I believe, knows the specific NFPA rule

Re: root servers DDoS

2002-10-21 Thread Matthew Richardson
On Tue, 22 Oct 2002, Petri Helenius wrote: > Anyone have insight into the (seemingly) DoS attack on root-servers > which started around 20 UTC and widened to more servers on 20:35 UTC? > > Not that it´s causing any serious operational problems but slows down > things a lot. We have automated mon

Re: root servers DDoS

2002-10-21 Thread John M. Brown
I don't think so. We saw problems about 15 min before the nsp-sec list posting, and at that point the volume was turned up.. I don't beleive ICANN received any "advance" warning but don't quote me on that. I'll go find out though in private, john brown On Mon, Oct 21, 2002 at 05:38:32P

Re: root servers DDoS

2002-10-21 Thread Paul Vixie
[EMAIL PROTECTED] (Sean Donelan) writes: > Best guess, its a smurf attack. Networks which still have ip > directed-broadcast (or your vendor's equivalent) enabled on interfaces. > > Its still amazing how much traffic it can generate. however, this attack was icmp request, not icmp reply. -- Pa

Fwd: IETF Call for Nominations

2002-10-21 Thread RJ Atkinson
Operators who are involved in IETF should consider providing input (good/bad/other) to the IETF Nomcom -- since that is the best way to affect the future makeup of the IESG and IAB. Details below. Cheers, Ran Begin forwarded message: From: Phil Roberts <[EMAIL PROTECTED]> Date: Mon Oct 21

Congestion at SBC/AADS NAP?

2002-10-21 Thread John Kristoff
Has anyone seen what may be ATM level congestion at the Chicago NAP recently? ...or have you seen it in the recent past? We're having trouble pinpointing a problem, which may have been occurring for a long time, but just now really beginning to affect us significantly. We are seeing latency on

Re: attacking DDOS using BGP communities?

2002-10-21 Thread Iljitsch van Beijnum
Ok, I'm a bit late to the party but... On Fri, 18 Oct 2002, Saku Ytti wrote: > 1) Signaling unwanted traffic. >You would set community which would just inform that you are receiving > unwanted traffic. This way responsible AS# with statistical netflow > could easily automaticly search for th