North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Growing DoS attacks

  • From: Paul Timmins
  • Date: Wed Jan 16 18:51:44 2002 
What about BGP route flap dampening, people use that, don't they?
-Paul

At 06:12 PM 1/16/2002, you wrote:

Get a box, and run Zebra BGPD, which will announce that /24 to your network.
Then do a script which monitors the traffic to the irc server, and on a
certain threshold, kill BGPD. wait a certain time, like 15minutes or so, and
restart BGPD. It would be nice to check the traffic every minute and if 2
consecutive checks are positive kill bgpd. That mean that you  may be able
to STOP dDoS to irc servers within 2-3 minutes...