Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Incidents
[Top] [All Lists]

DoS/DDoS on port 1863(MSN protocol)

Subject: DoS/DDoS on port 1863(MSN protocol)
Date: Thu, 23 Sep 2004 13:01:05 -0300
Hi all,
 I work in an Satellite ISP(teleport) and we are experimenting a Dos/DDoS
Attack in our routers on port 1863.
Too much SYNs are being sent from a lot of our Public IP Customers to 1863
port to MSN Servers.
10.000 connections per seconds are generated in our TCP accelerators
systems, and overflows this system and borders routers.
We can identify the customers, but are too much. We cannot drop this port
because MSN application uses and we cannot apply policies to our firewalls
because the MSN Servers response to SYNs generated from our customers.
We have Allot systems that perform filters by IP header, but really, we need
to filter by application layer.

Anybody has an idea to solve this problem?

Tks in advance.

Diego S. González
Operations Team
Telespazio
Visit us @ http://www.finmeccanica.it
Visit us @ http://www.telespazio.it





<Prev in Thread] Current Thread [Next in Thread>