Re: Denial of Service, Good for AS/400?

[Tom Hightower/Solutions_Inc<tomh@xxxxxxxxx>]

Why not?  The nature of the attacks is that they are legitimate data 
requests (gigabytes per second), coming from real machines with real IP 
addresses.  The IBM web server has a feature where it can recognize a DOS 
attack from a particular IP address, and lock out any further requests from 
it - if you've configured it to do so.  But until it locks out that IP, it 
still must deal with the requests.  You get enough machines participating 
in the attack, and no single server is going to be able to cope.

Stopping the attacks at the ISP would help. If a packet is coming from one 
of their clients without the proper IP address, it should not be allowed to 
continue thru the network.  They should also be able to detect spoofed 
addresses.  A lot of new ISPs don't do this.

A clustered environment wherein secondary servers pick up the load when the 
primary is bombarded would help.  Multiple machines are expensive, but if 
you're in the web business, it's something you'd better consider.





Pike4@ix.netcom.com on 02/10/2000 10:58:14 AM
To:     MIDRANGE-L@midrange.com
cc: 

Subject:        Denial of Service, Good for AS/400?



During the recent outrages at Yahoo and the others, by hackers who as I 
understand it, overload the web servers, with excessive email, I was 
wondering if this could happen to an AS/400 web server?




+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---