Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | RE: DOS Attack? |
|---|---|
| Date: | Mon, 29 Nov 2004 13:53:01 -0000 |
Shaun Have you consider the possibility it's the internal host connecting to the external server? A Trojan (et al)? Try SHOW IP INSECT SESSION See how the connections are being made. (Be care full posting such dumps as they can give a lot away!) Andy -----Original Message----- From: Shawn Wall [mailto:sjwall@shaw.ca] Sent: 25 November 2004 02:23 To: security-basics@securityfocus.com Subject: DOS Attack? Hi List, I'm currently experiencing network outages due to what appears to be DOS attacks. I'm running a wireless ISP using a Cisco 2611 and CBAC and I have a /24 public address range. During the outage I can see traffic from a single external host sending thousands of packets to a single internal host. I don't have port 80 inbound open in my ACLs so I don't understand how the external host is even able to contact the internal host to begin with. Secondly, how is it possible for an attack on 1 internal host to cripple the rest of my network? Any feedback would be welcome. Thanks. shawn
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | RE: Spyware Adware URL lists, Ryan Duff |
|---|---|
| Previous by Thread: | RE: DOS Attack?, David Gillett |
| Next by Thread: | deny access, Carlos Garcia |
| Indexes: | [Date] [Thread] [Top] [All Lists] |