North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: SYN floods (was: does history repeat itself?)

  • From: Robbie Honerkamp
  • Date: Mon Sep 09 12:48:52 1996 
> On Mon, 9 Sep 1996, Avi Freedman wrote:
> 
> >I will make time to start running the route aggregator at routes.netaxs.com
> >again; we've been fighting a random-src-address-SYN-attacker for the last
> >week or two.  I may have some comments on THAT for NANOG re: inter-provider
> >cooperation shortly.
> 
> A friend of mine gave me a photocopy of a page in the latest 2600
> magazine.  It was the source code for a SYN flooder on Linux, with a
> description of what it does and a notice on how it can really cause
> denial-of-service attacks.

And about a paragraph of "Don't do this. This is really really bad.
Please don't compile this.".. :)

> I can't remember if it also supplied the source for the source-spoof
> kernel patch or not, but it does mention that you should use the
> source-spoof patch to hide your identity.

It doesn't provide the source or location for the source spoof kernel patch,
but it's easy enough to find.

Methinks this is going to be happening more often (DoS attacks).

Imminent Death Of The Net Predicted :)

Robbie

- - - - - - - - - - - - - - - - -