Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: (ASCEND) Smurf attacks
Well, I have this (unofficial) port for FreeBSD servers that is supposed to be available for Linux as well. Not exactly for the Max's, but may help the servers themselves against DOS attacks and port scans..
The program is Abacus Sentry. It monitors for udp and tcp DOS attacks and port scans, and if you specify can retaliate to the ip from whence it came. ;)
ie: winnuke, ssping, or an automatically generated letter to root at the originating domain. It's user configurable, also will send out text warning to the attacker, and will add a deny all to your system files immediately to deny any further attempts from the attacker. Variable levels of protection, and logging facilities as well.
It may not be the end of all your troubles, but it has helped me on my home servers and seems to work very well.
I have included the port for FreeBSD, (linux and Nt users, sorry, yer on yer own..)
Jake Schleich
==============================================
Jake Schleich email: jake@ican.net
ACC Implementation Department
ACC Canadian Operations Staff
(416) 207-7142 or Corporate Support (888) ACC-8577
==============================================
http://www.ican.net http://www.voyageurs.net http://www.acctel.net
-Subject: Re: (ASCEND) Smurf attacks
>Check out http://www.quadrunner.com/~chuegen/smurf.html
>
>Craig is speaking at the next Usenix I believe on this particular issue.
>
>On Thu, Jan 22, 1998 at 07:21:50AM +1000, Gary Stern stated
>> Hi folks,
>> With the various ways of doing attacks against other users/servers
>> etc has anyone come up with standard filters which can be usd to
>> prevent these attacks originating or effect users dialed into Max's
>>
>>
>>
>> ++ Ascend Users Mailing List ++
>> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
>> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
>--
>++ Ascend Users Mailing List ++
>To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
>To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
abacus_sentry.tar.gz
Follow-Ups: