To LUGNET HomepageTo LUGNET News HomepageTo LUGNET Guide Homepage
 Help on Searching
 
Post new message to lugnet.admin.nntpOpen lugnet.admin.nntp in your NNTP NewsreaderTo LUGNET News Traffic PageSign In (Members)
 Administrative / NNTP / 1356
1355  |  1357
Subject: 
Re: NNTP is working (mostly)
Newsgroups: 
lugnet.admin.nntp
Date: 
Wed, 24 Sep 2003 19:29:06 GMT
Viewed: 
2993 times
  
In lugnet.admin.general, Todd Lehman wrote:
In lugnet.admin.general, Rob Hendrix wrote:
Just wanted to let people know this.  10 AM Central time.  Sept. 23, 2003.

Actually, the site wasn't down -- only the dynamic portions of the webserver
were shut off (voluntarily and automatically by the system) to help keep the
load average down.  The NNTP attacks are still coming and the total number of
compromised hosts out there that have been participating in the DoS attack --
and that are now blocked -- is up to 16.  Last night I installed a throttle on
the NNTP server to hopefully minimize the damage that newly appearing hosts can
inflict.  It's still a bit of a battle for now, though, and NNTP service is
still spotty, I'm afraid, until we get through this.

--Todd

Just a passing idea..  setting up a tarpit to mimmic the NNTP server, then
sending the misbehaving traffic there rather than blocking it. That might slow
down the offending servers to such a point that they back off.

Ray



Message has 1 Reply:
  Re: NNTP is working (mostly)
 
(...) Yup, started doing that Monday evening. It worked quite well for a while, until the author of the attacks discovered the tarpit behavior and adapted. --Todd (21 years ago, 24-Sep-03, to lugnet.admin.nntp)

Message is in Reply To:
  Re: NNTP is working (mostly)
 
(...) Actually, the site wasn't down -- only the dynamic portions of the webserver were shut off (voluntarily and automatically by the system) to help keep the load average down. The NNTP attacks are still coming and the total number of compromised (...) (21 years ago, 23-Sep-03, to lugnet.admin.general, lugnet.admin.nntp)

13 Messages in This Thread:





Entire Thread on One Page:
Nested:  All | Brief | Compact | Dots
Linear:  All | Brief | Compact

This Message and its Replies on One Page:
Nested:  All | Brief | Compact | Dots
Linear:  All | Brief | Compact
    

Custom Search

©2005 LUGNET. All rights reserved. - hosted by steinbruch.info GbR