Subject:
|
Re: NNTP is working (mostly)
|
Newsgroups:
|
lugnet.admin.nntp
|
Date:
|
Thu, 25 Sep 2003 18:08:05 GMT
|
Viewed:
|
2921 times
|
| |
| |
In lugnet.admin.nntp, Todd Lehman wrote:
> In lugnet.admin.nntp, Ray Sanders wrote:
> > Just a passing idea.. setting up a tarpit to mimmic the NNTP server, then
> > sending the misbehaving traffic there rather than blocking it. That might
> > slow down the offending servers to such a point that they back off.
>
> Yup, started doing that Monday evening. It worked quite well for a while,
> until the author of the attacks discovered the tarpit behavior and adapted.
>
> --Todd
Todd,
pardon my ignorance, but is this a DoS aimed at Lugnet specifically, or a
more generic NNTP attack?
who would want to pester Lugnet?
Chris
|
|
Message has 2 Replies: | | Re: NNTP is working (mostly)
|
| (...) Hard to know for sure. More and more, it's seeming like the former rather than the latter. Early on, the attacks all consisted of commands to repeatedly list the contents of known existing newsgroups on this server, which made it seem (...) (21 years ago, 25-Sep-03, to lugnet.admin.nntp)
|
Message is in Reply To:
| | Re: NNTP is working (mostly)
|
| (...) Yup, started doing that Monday evening. It worked quite well for a while, until the author of the attacks discovered the tarpit behavior and adapted. --Todd (21 years ago, 24-Sep-03, to lugnet.admin.nntp)
|
13 Messages in This Thread:
- Entire Thread on One Page:
- Nested:
All | Brief | Compact | Dots
Linear:
All | Brief | Compact
This Message and its Replies on One Page:
- Nested:
All | Brief | Compact | Dots
Linear:
All | Brief | Compact
|
|
|
|