[AusNOG] network security Question

Alex Samad - Yieldbroker Alex.Samad at yieldbroker.com
Wed May 21 10:12:59 EST 2014


I will get my get my assistant Mr G. Orwell  right on it now

A

From: Geordie Guy [mailto:elomis at gmail.com]
Sent: Wednesday, 21 May 2014 10:11 AM
To: Alex Samad - Yieldbroker
Cc: ausnog at lists.ausnog.net
Subject: Re: [AusNOG] network security Question

If you are actually getting ping flooded and this poses an actual risk to your business, create a firewall rule to block any traffic where the destination is your public IP and the source is 1994.

On Wed, May 21, 2014 at 10:08 AM, Alex Samad - Yieldbroker <Alex.Samad at yieldbroker.com<mailto:Alex.Samad at yieldbroker.com>> wrote:
Hi

With the icmp, I was more thinking about rate limiting, all nice to allow it through, but I also rate limit.  Haven't got any shaping on, but I would be de prioritising a lot of icmp

Just wondering what sort of level do (if they do) rate limit icmp to

A

> -----Original Message-----
> From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net<mailto:ausnog-bounces at lists.ausnog.net>] On Behalf Of
> Chris Chaundy
> Sent: Wednesday, 21 May 2014 10:00 AM
> To: David Beveridge
> Cc: ausnog at lists.ausnog.net<mailto:ausnog at lists.ausnog.net>
> Subject: Re: [AusNOG] network security Question
>
> Yay!  Bring back static host files... :-)
>
> Sent from my iPhone
>
> > On 21 May 2014, at 9:32, David Beveridge <dave at bevhost.com<mailto:dave at bevhost.com>> wrote:
> >
> >> On Wed, May 21, 2014 at 9:21 AM, Oliver Eyre
> <oliver.eyre at bigair.net.au<mailto:oliver.eyre at bigair.net.au>> wrote:
> >> How else are you supposed to stop the hackers if you can't block ICMP???
> > Hmm,
> > Better block DNS requests also...
> >
> > http://analogbit.com/tcp-over-dns_howto
> > _______________________________________________
> > AusNOG mailing list
> > AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
> > http://lists.ausnog.net/mailman/listinfo/ausnog
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
> http://lists.ausnog.net/mailman/listinfo/ausnog
_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140521/f2d5fad3/attachment.html>


More information about the AusNOG mailing list