Search Again: Re: DOS - Smurf attacks!! From: Webmaster Date: Tuesday, November 9, 1999 Time: 9:59:00 pm >Hi, > >>We keep getting icmp echo code 0 attacks which is causing our >>QuickDNS Pro's to either "type 11" or "type 2" as soon as we receive >>the icmp echo code 0. We have been using NetBarrier firewall which >>is telling us what happens but QuickDNS still bombs. They are our >>main name servers so this is a major problem! > >I'm pretty sure that QuickDNS Pro quits because the TCP/IP stack on the >machine is not functioning properly. You should be able to configure >NetBarrier to block this type of attacks. > >How often has your server been attacked? > >Best regards, >Sigfus >-- Hi Sigfus 3 major attacks so far. NetBarrier doesn't stop it in time, it only logs 2 pings then the machine dies. We had to put an ICMP in block filter in our main WAN router, nothing else worked. No matter which machine was ns1, it died, it was the main target of the attackers. All machines run 8.6, basics only, and are either 604e machines or G3 beige & blues. We did track them with the aid of a fellow ISP back east and we did find the attackers.. The records have been forwarded to the FBI and our lawyers. One was a SysAdmin at a small ISP in the US who was 21 and the other was his room mate!! They both "hang out" online at an IRC site and all their conversations were logged and forwarded also, with the aid of the sites admins. This is all I can say for now. The best thing to do is buy a LARGE FireWall, hardware type, and place it between your main WAN router and your servers/lan. Looking forward to QuickDNS Pro 2.2.2., if there is one coming, with an easier GUI maybe and better listing view, maybe extra settings for the server too? A "anti spoof" filter etc.? Just a suggestion. Until now QDNS has been excellent and reliable, call it a "wish list". Thanks for your help Sigfus, I'll call you soon. :-) Bobbi Bobbi Style CEO LakesWEB Communications Ltd. Box 158 - Suite A, 197 1st Ave, Burns Lake, BC, V0J 1E0, Canada. 1-877 LAKESWEB (Toll Free in Canada.) Tel: 250 692 0068 Fax: 250 692 0057 http://www.LakesWEB.com/

Messages In This Thread: DOS - Smurf attacks!! by Bobski on Nov 4, 1999 at 8:03:00 pm Re: DOS - Smurf attacks!! by Sigfus Magnusson on Nov 9, 1999 at 4:47:00 pm Re: DOS - Smurf attacks!! by Webmaster on Nov 9, 1999 at 9:59:00 pm Re: DOS - Smurf attacks!! by Simon Forster on Nov 11, 1999 at 11:08:00 am Re: DOS - Smurf attacks!! by Webmaster on Nov 11, 1999 at 9:34:00 pm