Counter DoS

Rachael Treu rara at navigo.com
Thu Mar 11 20:45:30 UTC 2004


Mmm.  A firewall that lands you immediately in hot water with your
ISP and possibly in a courtroom, yourself.  Hot.

Legality aside...

I don't imagine it would be too hard to filter these retaliatory
packets, either.  I expect that this would be more wad-blowing
than cataclysm after the initial throes, made all the more ridiculous
by the nefarious realizing the new attack mechanism created by these 
absurd boxen.  A new point of failure and an amplifier rolled all
into one!  Joy!

More buffoonery contributed to the miasma.  Nice waste of time,
Symbiot.  Thanks for the pollution, and shame on the dubious ZDnet
for perpetuating this garbage.

ymmv,
--ra

-- 
rachael treu, CISSP       rara at navigo.com
..quis costodiet ipsos custodes?..


On Wed, Mar 10, 2004 at 11:25:20PM -0800, Gregory Taylor said something to the effect of:
> 
> After reading that article, if this product really is capable of 
> 'counter striking DDoS attacks', my assumption is that it will fire 
> packets back at the nodes attacking it.  Doing such an attack would not 
> be neither feasible or legal.  You would only double the affect that the 
> initial attack caused to begin with, plus you would be attacking hacked 
> machines and not the culprit themselves, thus pouring gasoline all over 
> an already blazing inferno.
> 
> This product is a bad bad idea and anyone who invests money into it 
> should slap themselves very hard with a metal gauntlet for being so 
> gullible.
> 
> Greg
> 
> >>>In message <0aa101c40707$eebc2650$dbc21e43 at Somi>, "Joshua Brady" 
> >>>writes:
> >>>  
> >>>
> >>>>http://news.zdnet.co.uk/internet/security/0,39020375,39148215,00.htm
> >>>>
> >>>>Comments?
> >>>>    
> >>>
> 





More information about the NANOG mailing list