[AusNOG] network security Question

[Geordie Guy]

If you are actually getting ping flooded and this poses an actual risk to
your business, create a firewall rule to block any traffic where the
destination is your public IP and the source is 1994.


On Wed, May 21, 2014 at 10:08 AM, Alex Samad - Yieldbroker <
Alex.Samad at yieldbroker.com> wrote:

> Hi
>
> With the icmp, I was more thinking about rate limiting, all nice to allow
> it through, but I also rate limit.  Haven't got any shaping on, but I would
> be de prioritising a lot of icmp
>
> Just wondering what sort of level do (if they do) rate limit icmp to
>
> A
>
> > -----Original Message-----
> > From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of
> > Chris Chaundy
> > Sent: Wednesday, 21 May 2014 10:00 AM
> > To: David Beveridge
> > Cc: ausnog at lists.ausnog.net
> > Subject: Re: [AusNOG] network security Question
> >
> > Yay!  Bring back static host files... :-)
> >
> > Sent from my iPhone
> >
> > > On 21 May 2014, at 9:32, David Beveridge <dave at bevhost.com> wrote:
> > >
> > >> On Wed, May 21, 2014 at 9:21 AM, Oliver Eyre
> > <oliver.eyre at bigair.net.au> wrote:
> > >> How else are you supposed to stop the hackers if you can't block
> ICMP???
> > > Hmm,
> > > Better block DNS requests also...
> > >
> > > http://analogbit.com/tcp-over-dns_howto
> > > _______________________________________________
> > > AusNOG mailing list
> > > AusNOG at lists.ausnog.net
> > > http://lists.ausnog.net/mailman/listinfo/ausnog
> > _______________________________________________
> > AusNOG mailing list
> > AusNOG at lists.ausnog.net
> > http://lists.ausnog.net/mailman/listinfo/ausnog
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140521/0d21f9bf/attachment.html>