Re: Denial of Service, Good for AS/400?

["PAOLO YABUT" <dp@xxxxxxxxxxx>]

Also remember hackers have a way of  fooling a server by making it look like
a valid IP on that network...but I THINK on an as/400 if it does affect an
as/400 the downtime will not be 3 1/2 hours
----- Original Message -----
From: "Tom Hightower/Solutions_Inc" <tomh@simas.com>
To: <midrange-l@midrange.com>
Sent: Thursday, February 10, 2000 12:47 PM
Subject: Re: Denial of Service, Good for AS/400?


> Why not?  The nature of the attacks is that they are legitimate data
> requests (gigabytes per second), coming from real machines with real IP
> addresses.  The IBM web server has a feature where it can recognize a DOS
> attack from a particular IP address, and lock out any further requests
from
> it - if you've configured it to do so.  But until it locks out that IP, it
> still must deal with the requests.  You get enough machines participating
> in the attack, and no single server is going to be able to cope.
>
> Stopping the attacks at the ISP would help. If a packet is coming from one
> of their clients without the proper IP address, it should not be allowed
to
> continue thru the network.  They should also be able to detect spoofed
> addresses.  A lot of new ISPs don't do this.
>
> A clustered environment wherein secondary servers pick up the load when
the
> primary is bombarded would help.  Multiple machines are expensive, but if
> you're in the web business, it's something you'd better consider.
>
>
>
>
>
> Pike4@ix.netcom.com on 02/10/2000 10:58:14 AM
> To:     MIDRANGE-L@midrange.com
> cc:
>
> Subject:        Denial of Service, Good for AS/400?
>
>
>
> During the recent outrages at Yahoo and the others, by hackers who as I
> understand it, overload the web servers, with excessive email, I was
> wondering if this could happen to an AS/400 web server?
>
>
>
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
david@midrange.com
> +---

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---