-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
> I work at a small company and for the last 4 days our small network (4 > computers!!!) could not and still can not get online, I told my boss it might > be a DOS (Denial of service) attack. all the files seem to be OK but I just > cant get donline, Question, how do you recover from this type of attack?? > > The OS's are Windows ME and windows 2000 the other boxes are linux (Mandrake > and RedHat) all connected via a router. My friend told me to just reset the > router connection (internet connection) and all will be well, but I just want > some expert advice before doing so. I hope to hear from someone soon. > Reseting the router may be a good first step. There are a number of reasons why you could lose your internet connection. If reseting the router doesn't help, and calling the tech support for your ISP fails, setup a sniffer to see what kind of traffic you have hitting the router. Try to find patterns and see if it matches known DOS attacks. Many DOS attacks follow certain patterns (e.g. from certain sources or traffic type). Block this traffic on your router. You may need the cooperation of your ISP as they may have to block the traffic so it does not fill up the line to your router. - -- - ------- [EMAIL PROTECTED] Join http://www.DShield.org Distributed Intrusion Detection System -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE7zbo6VOIizK5pIDMRAmWPAKCojELh4nGajcTziV9PjTxYA3+BtQCfbkxH aAeaug3cYtzTGuDBSafOBb8= =axxq -----END PGP SIGNATURE-----
