Growing DoS attacks

Paul Timmins paul at timmins.net
Wed Jan 16 23:49:48 UTC 2002


What about BGP route flap dampening, people use that, don't they?
-Paul

At 06:12 PM 1/16/2002, you wrote:
>Get a box, and run Zebra BGPD, which will announce that /24 to your network.
>Then do a script which monitors the traffic to the irc server, and on a
>certain threshold, kill BGPD. wait a certain time, like 15minutes or so, and
>restart BGPD. It would be nice to check the traffic every minute and if 2
>consecutive checks are positive kill bgpd. That mean that you  may be able
>to STOP dDoS to irc servers within 2-3 minutes...




More information about the NANOG mailing list