RE: DOS ATTACK

From: David Vincent (david.vincentat_private)
Date: Mon Oct 28 2002 - 15:32:23 PST

Next message: McCammon, Keith: "RE: DOS ATTACK"

Previous message: james: "Re: DOS ATTACK"
Maybe in reply to: Hunt, Jim: "DOS ATTACK"
Next in thread: Jose Nazario: "RE: DOS ATTACK"
Next in thread: McCammon, Keith: "RE: DOS ATTACK"
Reply: Jose Nazario: "RE: DOS ATTACK"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

add a firewall (such as the wonderful kerio personal firewall -
http://www.kerio.com) and block that IP from accessing the machine.

you might have to do some digging at http://www.samspade.org to figure out
what IP blocks the big guy owns and therefore might be sources of the
attack.

-d



-----Original Message-----
From: Hunt, Jim [mailto:Jim.Huntat_private]
Sent: October 27, 2002 8:59 PM
To: Incidentsat_private
Subject: DOS ATTACK


I have a friend that has a DOS Attack going on against their website.  It is
being done by someone with a very popular website trying to squash a little
guy.  He is doing it be placing 1 pixel by 1 pixel inline frames in his
webpages and having them load my friends webpage.  It is killing his server
and bandwidth.
 
What can we do to block?  The Server is W2K with IIS.
 
Thanks!

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: McCammon, Keith: "RE: DOS ATTACK"
Previous message: james: "Re: DOS ATTACK"
Maybe in reply to: Hunt, Jim: "DOS ATTACK"
Next in thread: Jose Nazario: "RE: DOS ATTACK"
Next in thread: McCammon, Keith: "RE: DOS ATTACK"
Reply: Jose Nazario: "RE: DOS ATTACK"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Oct 28 2002 - 19:14:42 PST