no ip forged-source-address

2002-10-30 Thread variable
Hi, I've been following the discussion on DDoS attacks over the last few weeks and our network has also recently been the target of a sustained DDoS attack. I'm not alone in believing that source address filters are the simplest way to prevent the types of DDoS traffic that we have all been seei

Re: Akamai DNS Issue?

2004-06-15 Thread variable
Hi, We've been seeing this too, but it looks to have been fixed from here (AS12703) as of about 2 minutes ago. Regards, Rich On Tue, 15 Jun 2004, Deepak Jain wrote: > > > We're seeing it too. Has AKAM lost any key talent that kept them > straight until a few weeks ago? Isn't this the secon

Re: Odd DDoS, anyone else seen this?

2002-11-25 Thread variable
On Mon, 25 Nov 2002, Stephen J. Wilcox wrote: > We saw many hundred thousand packets per second entering our network > from various international peers, each packet was tcp destined to a > single real end user IP address and sourced from a /16 network address > eg 61.254.0.0, where the src was ra

Re: Odd DDoS, anyone else seen this?

2002-11-25 Thread variable
On Mon, 25 Nov 2002, Stephen J. Wilcox wrote: > Glad to know its not just me.. DDoS is a problem for everyone, but only a few people seem to be trying to do anything about it. > FYI x.x.0.0 is a valid host address as is x.x.x.0 and it would be > technically incorrect to block it assuming it t

Re: Odd DDoS, anyone else seen this?

2002-11-25 Thread variable
On Mon, 25 Nov 2002, Chris Roberts wrote: > Yer, some dial providers that I've seen do it to make use of these > addresses, as x.x.x.0/32 is a perfectly valid host address. I've seen this too. Dialup boxes that use dynamic pools prefer them to start on a subnet boundry so that they can announce

Re: Risk of Internet collapse grows

2002-11-27 Thread variable
On Wed, 27 Nov 2002, David Diaz wrote: > I think this is old news. There was a cover story back in 1996 time > frame on Mae_east. We have to ask how likely is this with many of > the top backbones doing private peering over local loops, how much > damage would occur if an exchange point whe

Re: BTinternet problems?

2003-06-20 Thread variable
On Thu, 19 Jun 2003, Mike wrote: > I have sent mail to every address @BT that looks like it might possess > clue, to no avail. This is a general plea for help- if anyone has an > idea of how I might resolve this, I would be very grateful... Point the customer at www.traceroute.org? HTH, Ric

re: rfc1918 ignorant

2003-07-23 Thread variable
On Wed, 23 Jul 2003, Dave Temkin wrote: > Is this really an issue? So long as they're not advertising the space I > see no issue with routing traffic through a 10. network as transit. If > you have no reason to reach their router directly (and after Cisco's last > exploit, I'd think no one woul

Re: source filtering (Re: rfc1918 ignorant)

2003-07-24 Thread variable
On Wed, 23 Jul 2003, Jared Mauch wrote: > I think you'll see more and more networks slowly over > time move closer to bcp38. Is there anywhere that this is recorded? It would be interesting to see what the actual state of play on implementation of BCP38 was. > I believe that AT&T is

France Telecom/Open Transit

2003-07-30 Thread variable
Hi all, Does anyone have any good/bad experiences to share about France Telecom/Open Transit? Cheers, Rich

Re: WANTED: ISPs with DDoS defense solutions

2003-07-30 Thread variable
On Wed, 30 Jul 2003, Mike Tancsa wrote: > I recall one of our users was involved in a DoS once a few years back > when the "giant pings" could crash MS boxes. The fact that his perceived > anonymity was removed was enough to keep him from repeating his > attacks That's the heart of the probl

Re: WANTED: ISPs with DDoS defense solutions

2003-07-31 Thread variable
On Wed, 30 Jul 2003, Rob Thomas wrote: > I've tracked 1787 DDoS attacks since 01 JAN 2003. Of that number, > only 32 used spoofed sources. I rarely see spoofed attacks now. Do you have any ideas as to why that is? Is it due to more providers doing source filtering? It wouldn't make sense fo

RE: Server Redundancy

2003-08-14 Thread variable
On Wed, 6 Aug 2003, Austad, Jay wrote: > As a side note, I've used Cisco's CSS, F5's stuff, Alteon, and Foundry. Out > of all of them that I've used, the Foundry had the least problems and had a > nicely structured config. Foundry seems to be fine for www traffic, but has serious issues with

RE: How much longer..

2003-08-14 Thread variable
On Thu, 14 Aug 2003, St. Clair, James wrote: > Cars did not become more popular because owners had to learn how to swap > more parts. The good ole "computers as cars" metaphor. In the UK: 1) In order to drive a car, you have to have a license. 2) In order to have the car on the road, you ha

RE: How much longer..

2003-08-14 Thread variable
On Thu, 14 Aug 2003, St. Clair, James wrote: > I've lived in the UK, and never had a license to maintain or update the > engine. See point number 2: > > 2) In order to have the car on the road, you have to have it taxed and > > have a qualified mechanic certify it for basic road worthiness.

Windows update down again?

2003-08-17 Thread variable
Hi all, I was just updating a couple of Windows machines and had been using Windows Update without any problems until about 5 mins ago (22:10 GMT) when I've started getting this: "Thank you for your interest in Windows Update Windows Update is the online extension of Windows that helps you ge

Re: Windows update down again?

2003-08-17 Thread variable
It's just come back now. Must have been a temporary holding page while they did some maintenance. On Sun, 17 Aug 2003, [EMAIL PROTECTED] wrote: > > Hi all, > > I was just updating a couple of Windows machines and had been using > Windows Update without any problems until about 5 mins ago (2

GLBX ICMP rate limiting (was RE: Tier-1 without their own backbone?)

2003-08-28 Thread variable
On Wed, 27 Aug 2003, [EMAIL PROTECTED] wrote: > We have a similarly sized connection to MFN/AboveNet, which I won't > recommend at this time due to some very questionable null routing they're > doing (propogating routes to destinations, then bitbucketing traffic sent > to them) which is causing c

Re: ethernet-based temperature sensors

2003-09-04 Thread variable
On Wed, 3 Sep 2003, matthew zeier wrote: > I know this has been mentioned before, but other than NetBotz (too pricey), > what are people use as ethernet-based, SNMP-probable temp sensors? http://www.jacarta.co.uk Rich

Wirespeed 24-port L3 switches

2004-01-08 Thread variable
Hi all, We're looking at L3 switches which have decent L3 packet forwarding performance (wirespeed if possible), a reasonable amount of L4 ACLs/ACEs (an average of at least 80 per port) and comes in a 24-port 10/100 port package with a couple of GBIC slots for uplinking to the core network. OSP

Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-26 Thread variable
On Sun, 25 Jan 2004, Jeff Kell wrote: > We're running 30 SVIs on a 3550-12 (only 10 active at the moment, we're > in a transition). It is an aggregation switch that feeds back via L3. According to the documentation on the Cisco site: http://www.cisco.com/warp/public/473/145.html The 3550-12