Re: Denial of Service, Good for AS/400?

Tom, i dont think there's any product out there that can detect spoofed
ip's...right now every server is vulnerable to this kind of attacks....last
year an article stated that hackers are becoming more ORGANIZED ...attacks
on certain goverment servers at the same time came from us,japan..etc


----- Original Message -----
From: "Tom Hightower/Solutions_Inc" <tomh@simas.com>
To: <midrange-l@midrange.com>
Sent: Thursday, February 10, 2000 12:47 PM
Subject: Re: Denial of Service, Good for AS/400?


> Why not?  The nature of the attacks is that they are legitimate data
> requests (gigabytes per second), coming from real machines with real IP
> addresses.  The IBM web server has a feature where it can recognize a DOS
> attack from a particular IP address, and lock out any further requests
from
> it - if you've configured it to do so.  But until it locks out that IP, it
> still must deal with the requests.  You get enough machines participating
> in the attack, and no single server is going to be able to cope.
>
> Stopping the attacks at the ISP would help. If a packet is coming from one
> of their clients without the proper IP address, it should not be allowed
to
> continue thru the network.  They should also be able to detect spoofed
> addresses.  A lot of new ISPs don't do this.
>
> A clustered environment wherein secondary servers pick up the load when
the
> primary is bombarded would help.  Multiple machines are expensive, but if
> you're in the web business, it's something you'd better consider.
>
>
>
>
>
> Pike4@ix.netcom.com on 02/10/2000 10:58:14 AM
> To:     MIDRANGE-L@midrange.com
> cc:
>
> Subject:        Denial of Service, Good for AS/400?
>
>
>
> During the recent outrages at Yahoo and the others, by hackers who as I
> understand it, overload the web servers, with excessive email, I was
> wondering if this could happen to an AS/400 web server?
>
>
>
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
david@midrange.com
> +---

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---