Re: Denial of Service, Good for AS/400?

[boothm@xxxxxxxxxxxxxxxxx]

Isn't the idea that an AS/400 is somehow superior in a denial of service 
attack just  wishful thinking? A denial of service attack is about the 
pipes usually, not the server.  In either event though, if the doorway is 
blocked, the doorway is blocked.  This is not a question of robustness or 
stability but rather of pipe size.
_______________________
Booth Martin
boothm@earth.goddard.edu
http://www.spy.net/~booth
_______________________




"PAOLO YABUT" <dp@slomins.com>
Sent by: owner-midrange-l@midrange.com
02/10/2000 03:26 PM
Please respond to MIDRANGE-L

 
        To:     <MIDRANGE-L@midrange.com>
        cc: 
        Subject:        Re: Denial of Service, Good for AS/400?


Also remember hackers have a way of  fooling a server by making it look 
like
a valid IP on that network...but I THINK on an as/400 if it does affect an
as/400 the downtime will not be 3 1/2 hours
----- Original Message -----
From: "Tom Hightower/Solutions_Inc" <tomh@simas.com>
To: <midrange-l@midrange.com>
Sent: Thursday, February 10, 2000 12:47 PM
Subject: Re: Denial of Service, Good for AS/400?


> Why not?  The nature of the attacks is that they are legitimate data
> requests (gigabytes per second), coming from real machines with real IP
> addresses.  The IBM web server has a feature where it can recognize a 
DOS
> attack from a particular IP address, and lock out any further requests
from
> it - if you've configured it to do so.  But until it locks out that IP, 
it
> still must deal with the requests.  You get enough machines 
participating
> in the attack, and no single server is going to be able to cope.
>
> Stopping the attacks at the ISP would help. If a packet is coming from 
one
> of their clients without the proper IP address, it should not be allowed
to
> continue thru the network.  They should also be able to detect spoofed
> addresses.  A lot of new ISPs don't do this.
>
> A clustered environment wherein secondary servers pick up the load when
the
> primary is bombarded would help.  Multiple machines are expensive, but 
if
> you're in the web business, it's something you'd better consider.
>
>
>
>
>
> Pike4@ix.netcom.com on 02/10/2000 10:58:14 AM
> To:     MIDRANGE-L@midrange.com
> cc:
>
> Subject:        Denial of Service, Good for AS/400?
>
>
>
> During the recent outrages at Yahoo and the others, by hackers who as I
> understand it, overload the web servers, with excessive email, I was
> wondering if this could happen to an AS/400 web server?


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---