Re: Request for contact and procedure information

2009-07-10 Thread Henry Linneweh
http://www.verizonbusiness.com/us/products/security/managed/#services-dos From: Charles Wyble To: "nanog@nanog.org" Sent: Thursday, July 9, 2009 2:35:14 PM Subject: Request for contact and procedure information All, I'm currently experiencing a DDOS attack on my

Re: Request for contact and procedure information

2009-07-10 Thread Christopher Morrow
;>> all of that is free to 701 customers, yes. if you have to get to step3 >>>> more than a few times I'm sure sales will want you to pay, since that >>>> part isn't 'free' to the company. >>>> >>>> point being, dropping tcp/80 sy

Re: Request for contact and procedure information

2009-07-10 Thread Jeffrey Lyon
customer request. (or was when I was doing it there) >>> >>> -chris >>> >>> -- >>>> >>>> >>>> -Original Message- >>>> From: Christopher Morrow [mailto:morrowc.li...@gmail.com]

Re: Request for contact and procedure information

2009-07-10 Thread Christopher Morrow
(or was when I was doing it there) >> >> -chris >> >> -------------- >>> >>> >>> -Original Message- >>> From: Christopher Morrow [mailto:morrowc.li...@gmail.com] >>> Sent: Friday, July 10, 2009 5:40 PM >

Re: Request for contact and procedure information

2009-07-10 Thread Jeffrey Lyon
-- >> From: Christopher Morrow [mailto:morrowc.li...@gmail.com] >> Sent: Friday, July 10, 2009 5:40 PM >> To: Jeffrey Lyon >> Cc: nanog@nanog.org; Charles Wyble >> Subject: Re: Request for contact and procedure information >> >> On Fri, Jul 10, 2009 at 5:12

Re: Request for contact and procedure information

2009-07-10 Thread Christopher Morrow
--- > > > -Original Message- > From: Christopher Morrow [mailto:morrowc.li...@gmail.com] > Sent: Friday, July 10, 2009 5:40 PM > To: Jeffrey Lyon > Cc: nanog@nanog.org; Charles Wyble > Subject: Re: Request for contact and procedure information > > On Fri, Jul

RE: Request for contact and procedure information

2009-07-10 Thread Luan Nguyen
-- -Original Message- From: Christopher Morrow [mailto:morrowc.li...@gmail.com] Sent: Friday, July 10, 2009 5:40 PM To: Jeffrey Lyon Cc: nanog@nanog.org; Charles Wyble Subject: Re: Request for contact and procedure information On Fri, Jul 10, 2009 at 5:12 PM, Jeffrey Lyon wrote: > Would what? N

Re: Request for contact and procedure information

2009-07-10 Thread Christopher Morrow
On Fri, Jul 10, 2009 at 5:12 PM, Jeffrey Lyon wrote: > Would what? Null route the IP? I'm talking about actually filtering the > attack. as was I. (talking about filtering the attack) > On Jul 10, 2009 5:10 PM, "Christopher Morrow" > wrote: > > On Fri, Jul 10, 2009 at 2:11 AM, Jeffrey Lyon > wro

Re: Request for contact and procedure information

2009-07-10 Thread Jeffrey Lyon
Would what? Null route the IP? I'm talking about actually filtering the attack. Jeff On Jul 10, 2009 5:10 PM, "Christopher Morrow" wrote: On Fri, Jul 10, 2009 at 2:11 AM, Jeffrey Lyon wrote: > All, > > There a... uunet/vzb would/will (for free most times even)

Re: Request for contact and procedure information

2009-07-10 Thread Christopher Morrow
On Fri, Jul 10, 2009 at 2:11 AM, Jeffrey Lyon wrote: > All, > > There are few if any ISP that will help you with something like this. uunet/vzb would/will (for free most times even)

Re: Request for contact and procedure information

2009-07-10 Thread Seth Mattinen
Dan White wrote: > Seth Mattinen wrote: >> Dan White wrote: >> >>> Seth Mattinen wrote: >>> Dan White wrote: > Have you spoken with your provider? They should be giving you options, > like changing your static address, or null routing the attackers > upst

Re: Request for contact and procedure information

2009-07-10 Thread Dan White
Seth Mattinen wrote: Dan White wrote: Seth Mattinen wrote: Dan White wrote: Have you spoken with your provider? They should be giving you options, like changing your static address, or null routing the attackers upstream, or perhaps blocking port 80 to you, to limit your ingre

Re: Request for contact and procedure information

2009-07-10 Thread Seth Mattinen
Dan White wrote: > Seth Mattinen wrote: >> Dan White wrote: >> >>> Have you spoken with your provider? They should be giving you options, >>> like changing your static address, or null routing the attackers >>> upstream, or perhaps blocking port 80 to you, to limit your ingress >>> traffic. >>> >

Re: Request for contact and procedure information

2009-07-10 Thread Charles Wyble
I spoke with SBC. 2 hours on the phone (all with US based support which was awesome) came down to e-mail ab...@sbcglobal.net. I'll let everyone know how it goes.

Re: Request for contact and procedure information

2009-07-10 Thread Dan White
Seth Mattinen wrote: Dan White wrote: Have you spoken with your provider? They should be giving you options, like changing your static address, or null routing the attackers upstream, or perhaps blocking port 80 to you, to limit your ingress traffic. For DSL? I've never had that kind

Re: Request for contact and procedure information

2009-07-09 Thread Seth Mattinen
Jeffrey Lyon wrote: > All, > > There are few if any ISP that will help you with something like this. > Law enforcement also does not have the resources to even begin to look > at a single DSL line being attacked unless you can show 7+ figures in > damage or some type of major threat to national in

Re: Request for contact and procedure information

2009-07-09 Thread Jeffrey Lyon
All, There are few if any ISP that will help you with something like this. Law enforcement also does not have the resources to even begin to look at a single DSL line being attacked unless you can show 7+ figures in damage or some type of major threat to national infrastructure. Your options are

Re: Request for contact and procedure information

2009-07-09 Thread Jon Kibler
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jon Kibler wrote: > Charles Wyble wrote: >> All, > >> I'm currently experiencing a DDOS attack on my home DSL connection. > >> Thousands of requests to port 80. > >> I'm on an SBC business class account. > >> I'm guessing that calling the regular c

Re: Request for contact and procedure information

2009-07-09 Thread Jon Kibler
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Charles Wyble wrote: > All, > > I'm currently experiencing a DDOS attack on my home DSL connection. > > Thousands of requests to port 80. > > I'm on an SBC business class account. > > I'm guessing that calling the regular customer support won't get

Re: Request for contact and procedure information

2009-07-09 Thread JC Dill
Good, Fast, Cheap, pick any two. Consumer grade AT&T DSL is fast and cheap, and now you realize why Good is not included when you go with Fast and Cheap. jc Charles Wyble wrote: All, I'm currently experiencing a DDOS attack on my home DSL connection. Thousands of requests to port 80. I'm

Re: Request for contact and procedure information

2009-07-09 Thread Seth Mattinen
Dan White wrote: > Have you spoken with your provider? They should be giving you options, > like changing your static address, or null routing the attackers > upstream, or perhaps blocking port 80 to you, to limit your ingress > traffic. > For DSL? I've never had that kind of luck with SBC's (now

Re: Request for contact and procedure information

2009-07-09 Thread William McCall
Dude, he's on SBC man. They're not going to do anything but tell him to restart the modem. On Thu, Jul 9, 2009 at 9:42 PM, Dan White wrote: > Have you spoken with your provider? They should be giving you options, like > changing your static address, or null routing the attackers upstream, or > per

Re: Request for contact and procedure information

2009-07-09 Thread Dan White
Have you spoken with your provider? They should be giving you options, like changing your static address, or null routing the attackers upstream, or perhaps blocking port 80 to you, to limit your ingress traffic. - Dan Charles Wyble wrote: I did. Still getting pounded. John Peach wrote: Tur

Re: Request for contact and procedure information

2009-07-09 Thread Adrian Chadd
On Thu, Jul 09, 2009, Charles Wyble wrote: > I did. Still getting pounded. And its not covered by your SLA? Adrian

Re: Request for contact and procedure information

2009-07-09 Thread Charles Wyble
I did. Still getting pounded. John Peach wrote: Turn off whatever you have listening on port 80. On Thu, 9 Jul 2009 21:25:48 -0400 Mark Price wrote: Turn off your DSL modem for awhile, and hope for a new dynamic IP? Mark On Thu, Jul 9, 2009 at 5:35 PM, Charles Wyble wrote: All, I'm cu

Re: Request for contact and procedure information

2009-07-09 Thread Charles Wyble
I have a static range. :( Mark Price wrote: Turn off your DSL modem for awhile, and hope for a new dynamic IP? Mark

Re: Request for contact and procedure information

2009-07-09 Thread John Peach
Turn off whatever you have listening on port 80. On Thu, 9 Jul 2009 21:25:48 -0400 Mark Price wrote: > Turn off your DSL modem for awhile, and hope for a new dynamic IP? > > > Mark > > > > On Thu, Jul 9, 2009 at 5:35 PM, Charles Wyble > wrote: > > All, > > > > I'm currently experiencing a D

Re: Request for contact and procedure information

2009-07-09 Thread Mark Price
Turn off your DSL modem for awhile, and hope for a new dynamic IP? Mark On Thu, Jul 9, 2009 at 5:35 PM, Charles Wyble wrote: > All, > > I'm currently experiencing a DDOS attack on my home DSL connection. > > Thousands of requests to port 80. > > I'm on an SBC business class account. > > I'm gu

Re: Request for contact and procedure information

2009-07-09 Thread Jeffrey Lyon
Charles, You're going to need an enterprise grade DDoS protection provider and should expect to spend anywhere from hundreds to thousands per month for this service. This is not a service the majority of transit providers are capable of offering. Best regards, Jeff On Thu, Jul 9, 2009 at 5:35 P

Request for contact and procedure information

2009-07-09 Thread Charles Wyble
All, I'm currently experiencing a DDOS attack on my home DSL connection. Thousands of requests to port 80. I'm on an SBC business class account. I'm guessing that calling the regular customer support won't get me anywhere. Any suggestions?