Proposal for mitigating DoS attacks

jlewis at lewis.org jlewis at lewis.org
Sun Jul 11 15:45:02 UTC 1999


On Sun, 11 Jul 1999, Dan Rabb wrote:

> I agree that if this could be properly executed it would "mitigate" the
> effect to some parties, but at the same time, aren't you simply giving the
> attaker what he wants?  You are essentially finishing what he started by
> completing the Denial of Service.

By finishing rather quickly what the attacker started, you save the rest
of the network on the receiving end of the attack.  i.e. say some dialup
user or colocated server on your network is being smurfed.  Would you
rather the attack go on for an hour or two or three, cripling your entire
network, or sacrifice the target so that the rest of your network is
unaffected?

----don't waste your cpu, crack rc5...www.distributed.net team enzo---
 Jon Lewis *jlewis at lewis.org*|  Spammers will be winnuked or 
 System Administrator        |  nestea'd...whatever it takes
 Atlantic Net                |  to get the job done.
_________http://www.lewis.org/~jlewis/pgp for PGP public key__________






More information about the NANOG mailing list