RE: Effective ways to deal with DDoS attacks?

2002-05-02 Thread LeBlanc, Jason
uRPF and Radware DoShield, one DoShield per link btw edge router and core router. Use IDS (yes there is a way to capture all your traffic and anaylyze it, regardless of bandwidth, no it isn't one box) to identify a signature, build a filter, config filter on DoShield, up to ~200Mb/s per

RE: Effective ways to deal with DDoS attacks?

2002-05-02 Thread LeBlanc, Jason
- From: Richard A Steenbergen [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 02, 2002 9:23 AM To: LeBlanc, Jason Cc: 'Pete Kruckenberg'; [EMAIL PROTECTED] Subject: Re: Effective ways to deal with DDoS attacks? On Thu, May 02, 2002 at 08:54:05AM -0700, LeBlanc, Jason wrote: uRPF and Radware DoShield

RE: Effective ways to deal with DDoS attacks?

2002-05-02 Thread LeBlanc, Jason
Try a compiled ACL on a 3 port gigE for some fun. -Original Message- From: Christopher L. Morrow [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 02, 2002 9:48 AM To: Vincent Gillet Cc: Christopher L. Morrow; [EMAIL PROTECTED]; Pete Kruckenberg; [EMAIL PROTECTED] Subject: Re: Effective

RE: Effective ways to deal with DDoS attacks?

2002-05-02 Thread LeBlanc, Jason
that is valid would be in CEF. If I'm misunderstanding, please do send more info. -Original Message- From: Mark Turpin [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 02, 2002 10:05 AM To: LeBlanc, Jason Cc: [EMAIL PROTECTED] Subject: Re: Effective ways to deal with DDoS attacks? On Thu, May

RE: Effective ways to deal with DDoS attacks?

2002-05-02 Thread LeBlanc, Jason
to be worthwhile. -Original Message- From: Iljitsch van Beijnum [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 02, 2002 9:58 AM To: LeBlanc, Jason Cc: [EMAIL PROTECTED] Subject: RE: Effective ways to deal with DDoS attacks? If you just filter out anything that's not in the routing table, that's about

RE: Qwest Transit

2002-04-09 Thread LeBlanc, Jason
Being a coworker of Dre's, I can attest that his crack pipe is one of the finest. =P We love dre. ;) -Original Message- From: Gironda, Andre [mailto:[EMAIL PROTECTED]] Sent: Monday, April 08, 2002 9:35 PM To: 'Richard A Steenbergen '; Gironda, Andre Cc: ''Daniel Golding' '; ''Alex

RE: [Q] BGP filtering policies

2002-04-09 Thread LeBlanc, Jason
With enough badgering most providers will accept a /24 announcement of PA space. Exodus is the an exception, using their IP space is nightmarish. -Original Message- From: Borchers, Mark [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 09, 2002 12:35 PM To: '[EMAIL PROTECTED]' Subject:

RE: How to get better security people

2002-03-26 Thread LeBlanc, Jason
On that note, Etrade layed off their entire net sec team a few months back. I don't trade there no more. ;) -Original Message- From: Sean Donelan [mailto:[EMAIL PROTECTED]] Sent: Monday, March 25, 2002 7:05 PM To: [EMAIL PROTECTED] Subject: How to get better security people

RE: PacBell Security/Abuse contact

2002-03-25 Thread LeBlanc, Jason
I agree. -Original Message- From: Jon Mansey [mailto:[EMAIL PROTECTED]] Sent: Monday, March 25, 2002 12:17 PM To: Cheung, Rick Cc: [EMAIL PROTECTED] Subject: Re: PacBell Security/Abuse contact UUnet, excellent responsive abuse team IMHO. jm On Monday, March 25, 2002,

RE: long distance gigabit ethernet

2002-03-25 Thread LeBlanc, Jason
The new 15540 is a much better box, not much more $ either. There are some other people making extremely killer products, ONI being one that is very popular. I wouldn't invest in a 15454 anymore with all the new products out there, we still use them, but anything new will be a better box.