On Sun, Jan 12, 2003 at 03:33:16AM +0300, [EMAIL PROTECTED] wrote: > > much less CPU and plenty of places to strike. Protecting your network > > infrastructure is certainly the next place to go after you protect your > > high-target hosts. > > > > For some examples, see http://www.e-gerbil.net/ras/projects/dos/dos.txt > remember disposition: > small net(s) connected via low band (less then 10M) > link to one upstream.
Obviously if you have a low speed connection, your pipe will fill before the hosts or routers ever have a chance to fall over (unless you have a REALLY low end router :P). But if the point of this discussion is to protect the hosts from falling over, then the network must be able to deliver a sufficiently large attack. And nothing sucks quite like watching a GSR fall over under a 20Mbit SYN flood. :) -- Richard A Steenbergen <[EMAIL PROTECTED]> http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message
