Subject:
|
Re: NNTP is working (mostly)
|
Newsgroups:
|
lugnet.admin.nntp
|
Date:
|
Wed, 24 Sep 2003 22:01:49 GMT
|
Viewed:
|
2968 times
|
| |
|
|
In lugnet.admin.nntp, Ray Sanders wrote:
> Just a passing idea.. setting up a tarpit to mimmic the NNTP server, then
> sending the misbehaving traffic there rather than blocking it. That might
> slow down the offending servers to such a point that they back off.
Yup, started doing that Monday evening. It worked quite well for a while,
until the author of the attacks discovered the tarpit behavior and adapted.
--Todd
|
|
Message has 3 Replies:
 | | Re: NNTP is working (mostly)
|
| (...) Cool. One person posting over on BL suggested that the attack might be a generic SWEN attack looking to gather email addresses for other neferious purposes. One site[1] has chossen to move the NNTP port to 1119 temporarily until such time as (...) (21 years ago, 25-Sep-03, to lugnet.admin.nntp)
| | | Re: NNTP is working (mostly)
|
| (...) Todd, pardon my ignorance, but is this a DoS aimed at Lugnet specifically, or a more generic NNTP attack? who would want to pester Lugnet? Chris (21 years ago, 25-Sep-03, to lugnet.admin.nntp)
|
Message is in Reply To:
| | Re: NNTP is working (mostly)
|
| (...) Just a passing idea.. setting up a tarpit to mimmic the NNTP server, then sending the misbehaving traffic there rather than blocking it. That might slow down the offending servers to such a point that they back off. Ray (21 years ago, 24-Sep-03, to lugnet.admin.nntp)
|
13 Messages in This Thread:
 
 
- Entire Thread on One Page:
- Nested:
All | Brief | Compact | Dots
Linear:
All | Brief | Compact
This Message and its Replies on One Page:
- Nested:
All | Brief | Compact | Dots
Linear:
All | Brief | Compact
|
|
|
|
