<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: arial,helvetica,sans-serif; font-size: 10pt; color: #000000'>Fail2Ban on a couple of dozen servers may not be sufficient to address 400 gigs of traffic.<br><br><div><span name="x"></span><br><br>-----<br>Mike Hammett<br>Intelligent Computing Solutions<br>http://www.ics-il.com<br><br>Midwest-IX<br>http://www.midwest-ix.com<span name="x"></span><br></div><br><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From: </b>"Terrance Devor" <ter.devor@gmail.com><br><b>To: </b>"Mike Hammett" <nanog@ics-il.net><br><b>Cc: </b>"NANOG" <nanog@nanog.org><br><b>Sent: </b>Wednesday, September 22, 2021 10:24:07 AM<br><b>Subject: </b>Re: VoIP Provider DDoSes<br><br><div dir="ltr">Fail2Ban and give ourselves a pat on the back.. </div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Sep 22, 2021 at 9:12 AM Mike Hammett <<a href="mailto:nanog@ics-il.net" target="_blank">nanog@ics-il.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div style="font-family:arial,helvetica,sans-serif;font-size:10pt;color:rgb(0,0,0)"><font face="arial, helvetica, sans-serif"><span style="font-size:13.3333px"><a href="https://twit.tv/shows/security-now/episodes/837?autostart=false" target="_blank">https://twit.tv/shows/security-now/episodes/837?autostart=false</a></span></font><div><font face="arial, helvetica, sans-serif"><span style="font-size:13.3333px"><br></span></font></div><div><font face="arial, helvetica, sans-serif"><span style="font-size:13.3333px"><br></span></font></div><div><font face="arial, helvetica, sans-serif"><span style="font-size:13.3333px">It looks like Security Now covered this yesterday. They claimed that, "There is currently no provider of large pipe VoIP protocol DDoS protection."</span></font></div><div><font face="arial, helvetica, sans-serif"><span style="font-size:13.3333px"><br></span></font></div><div><font face="arial, helvetica, sans-serif"><span style="font-size:13.3333px">Are any of the cloud DDoS mitigation services offering a service like this.<br></span></font><br><hr id="gmail-m_4401602505277524194zwchr" style="color:rgb(0,0,0);font-family:arial,helvetica,sans-serif;font-size:10pt"><div style="color:rgb(0,0,0);font-family:Helvetica,Arial,sans-serif;font-size:12pt;font-weight:normal;font-style:normal;text-decoration:none"><b>From: </b>"Mike Hammett" <<a href="mailto:nanog@ics-il.net" target="_blank">nanog@ics-il.net</a>><br><b>To: </b>"NANOG" <<a href="mailto:nanog@nanog.org" target="_blank">nanog@nanog.org</a>><br><b>Sent: </b>Tuesday, September 21, 2021 4:19:42 PM<br><b>Subject: </b>VoIP Provider DDoSes<br><br><div style="font-family:arial,helvetica,sans-serif;font-size:10pt;color:rgb(0,0,0)">As many may know, a particular VoIP supplier is suffering a DDoS. <a href="https://twitter.com/voipms" target="_blank">https://twitter.com/voipms</a><div><br></div><div>Are your garden variety DDoS mitigation platforms or services equipped to handle DDoSes of VoIP services? What nuances does one have to be cognizant of? A WAF doesn't mean much to SIP, IAX2, RTP, etc.</div><div><br><div><span></span><br><br>-----<br>Mike Hammett<br>Intelligent Computing Solutions<br><a href="http://www.ics-il.com" target="_blank">http://www.ics-il.com</a><br><br>Midwest-IX<br><a href="http://www.midwest-ix.com" target="_blank">http://www.midwest-ix.com</a><span></span><br></div></div></div></div><br></div></div></div></blockquote></div>
</div><br></div></body></html>