DDOS anecdotes

Sat Jun 23 20:24:45 UTC 2001

-----Original Message-----
From: Mikael Abrahamsson [mailto:swmike at swm.pp.se]
Sent: Saturday, June 23, 2001 4:16 PM
To: 'nanog at merit.edu'
Subject: RE: DDOS anecdotes

On Sat, 23 Jun 2001, Tim Devries wrote:

> FYI beware of service pack 2.  It sets the DF bit so packets cannot
> fragment.  Particularily offensive if your server is on the other side of
a
> tunnel (due to the overhead).  The solution is to reduce the MTU on the
box.
> Or use a different OS :)

>I thought this was standard behaviour of Microsoft OSes since at least
>Win95. I know NT does this as standard, so does Win95 and 98. Win2k does
>this standard out of the box (at least last time I checked).

I have tested it with sp1 and this behaviour does not occur.
I have not tested it without any serverice packs so you may be correct in
that regard.

Tim Devries
Technical Trainer
Q9 Networks
100% Uptime

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20010623/b053afe6/attachment.html>