Re: [PLUG] emerg web server repair

[bergman@merctech.com]

In the message dated: Thu, 09 Aug 2012 18:05:55 EDT,
The pithy ruminations from Rich Freeman on 
<Re: [PLUG] emerg web server repair> were:
=> On Thu, Aug 9, 2012 at 5:55 PM, Paul Jungwirth <once@9stmaryrd.com> wrote:
=> > I'm a developer, not a sysadmin, so forgive my ignorance: is turning
=> > aside a DDOS really that easy? I've hear other smart people in IT say
=> > that there's actually very little you can do, and there are huge sites
=> > that have suffered extended downtime because of a DDOS attack.
=> 
=> It is.  In fact there is an even easier solution - just unplug the
=> network cable.
=> 
=> The problem with both solutions is that you essentially DOS yourself
=> to keep out the DDOS.  Maybe if you get them to attack the US

There's another problem with those "solutions"...the upstream provider
continues to receive all the traffic. This can seriously affect your
"peers" (ie., other customers of that provider who rely on the same
network, same routers, etc.).

Work with your provider, get them to help out with their firewall or routing.

	http://www.bgpexpert.com/antidos.php
	https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=3&ved=0CFEQxQEwAg&url=https%3A%2F%2Fdocs.google.com%2Fviewer%3Fa%3Dv%26q%3Dcache%3ANfyPwQ6Pc6YJ%3Awww.nanog.org%2Fmeetings%2Fnanog30%2Fpresentations%2Fmorrow.pdf%2B%26hl%3Den%26gl%3Dus%26pid%3Dbl%26srcid%3DADGEESgZD_-_L8B9QxmaomklVMMA2Jbb2QTRvVzi1v2qj32ZSAg8WNobPKwAizEpZgoC7wymdCerl2-tKCkLymW_sfRauf1O7x3xU73E8IJGaIay4HfG8HD9qEW2Y78AfKGHkBqVYJaP%26sig%3DAHIEtbTtjShXN7hxPAD4uo4sYtJMQCtTqw&ei=2TkkUKyaCcHq0gHD84DYDg&usg=AFQjCNGvXSTJheBZRX6ymMl_c7YUWooRAw&sig2=DMcWm_r_W94yhWyuVvKkpA&cad=rja

Mark


=> Government somebody else will take care of your problem out-of-band.
=> 
=> Actually continuing to serve traffic under a DDOS is very difficult indeed.
=> 
=> Rich
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug