A modest proposal

Robert E. Seastrom rs at bifrost.seastrom.com
Wed Sep 18 00:55:24 UTC 1996


   From: Michael Dillon <michael at memra.com>

   If it only takes 8 SYN packets to lock up a socket for 75 seconds then
   effective SYN flood attacks certainly *CAN* be launched from a dialup
   connection. And if the definition of an effective attack allows for
   intermittently shutting down a socket then effective attacks certainly
   *CAN be launched from places like Uruguay, Brazil, Indonesia and so forth.

The kids don't have this much finesse; witness the 2000 packet/sec
attacks recently seen.  Look for trouble where there isn't any (yet)
after getting the current problem dealt with, eh?

                                        ---Rob







More information about the NANOG mailing list