To LUGNET HomepageTo LUGNET News HomepageTo LUGNET Guide Homepage
 Help on Searching
 
Post new message to lugnet.admin.nntpOpen lugnet.admin.nntp in your NNTP NewsreaderTo LUGNET News Traffic PageSign In (Members)
 Administrative / NNTP / 1359
1358  |  1360
Subject: 
Re: NNTP is working (mostly)
Newsgroups: 
lugnet.admin.nntp
Date: 
Thu, 25 Sep 2003 18:08:05 GMT
Viewed: 
2921 times
  
In lugnet.admin.nntp, Todd Lehman wrote:
In lugnet.admin.nntp, Ray Sanders wrote:
Just a passing idea..  setting up a tarpit to mimmic the NNTP server, then
sending the misbehaving traffic there rather than blocking it. That might
slow down the offending servers to such a point that they back off.

Yup, started doing that Monday evening.  It worked quite well for a while,
until the author of the attacks discovered the tarpit behavior and adapted.

--Todd


Todd,

pardon my ignorance, but is this a DoS aimed at Lugnet specifically, or a
more generic NNTP attack?

who would want to pester Lugnet?

Chris



Message has 2 Replies:
  (canceled)
 
  Re: NNTP is working (mostly)
 
(...) Hard to know for sure. More and more, it's seeming like the former rather than the latter. Early on, the attacks all consisted of commands to repeatedly list the contents of known existing newsgroups on this server, which made it seem (...) (21 years ago, 25-Sep-03, to lugnet.admin.nntp)

Message is in Reply To:
  Re: NNTP is working (mostly)
 
(...) Yup, started doing that Monday evening. It worked quite well for a while, until the author of the attacks discovered the tarpit behavior and adapted. --Todd (21 years ago, 24-Sep-03, to lugnet.admin.nntp)

13 Messages in This Thread:





Entire Thread on One Page:
Nested:  All | Brief | Compact | Dots
Linear:  All | Brief | Compact

This Message and its Replies on One Page:
Nested:  All | Brief | Compact | Dots
Linear:  All | Brief | Compact
    

Custom Search

©2005 LUGNET. All rights reserved. - hosted by steinbruch.info GbR