Subject: Re: Distributed denial of service attacks.
To: Stephen M Jones <smj@cirr.com>
From: Hubert Feyrer <hubert.feyrer@informatik.fh-regensburg.de>
List: tech-security
Date: 09/08/2001 02:19:31
On Fri, 7 Sep 2001, Stephen M Jones wrote:
> help .. or are they?  Does anyone have any thoughts of how to combat 
> DOS/DDOS attacks or even tracing these with NetBSD?  I did try writing
> firewall rules for the IPs that I did get hoping that a few of them might
> be actual sources .. no luck there.  

There are two tools in pkgsrc that are intended to help detecting some
DDoS attacks. Recently, I also found snort very interresting in detecting
incoming "interresting" packets. 


 - Hubert

-- 
Want to get a clue on IPv6 but don't know where to start? Try this:
* Basics -> http://www.onlamp.com/pub/a/onlamp/2001/05/24/ipv6_tutorial.html
* Setup  -> http://www.onlamp.com/pub/a/onlamp/2001/06/01/ipv6_tutorial.html 
Of course with your #1 IPv6 ready operating system -> http://www.NetBSD.org/