Thread: DoS attacks
View Single Post
Old 18-01-2005, 18:17   #9
rdhw
Inactive
 
Join Date: Oct 2003
Location: Cambridge
Posts: 567
rdhw has entered a golden reputation erardhw has entered a golden reputation erardhw has entered a golden reputation erardhw has entered a golden reputation erardhw has entered a golden reputation erardhw has entered a golden reputation erardhw has entered a golden reputation erardhw has entered a golden reputation erardhw has entered a golden reputation erardhw has entered a golden reputation erardhw has entered a golden reputation era
Re: DoS attacks
Quote:
Originally Posted by setch
Can anybody assist with DoS attacks? My ip was being hit as below

Mon Jan 17 20:26:30 2005 1 Blocked by DoS protection 10.132.79.254
Mon Jan 17 20:26:30 2005 1 Blocked by DoS protection 10.132.79.254
Mon Jan 17 20:26:31 2005 1 Blocked by DoS protection 10.132.79.254
In my opinion, this is not a DoS attack at all. Whatever you are getting this message from is misdiagnosing the situation. In the NTL network where you are, the .254 addresses belong to the NTL head end (the CMTS, or UBR), and these attempts are legitimate network traffic (maybe ARPs, maybe DHCP replies). I would suspect your firewall (or whatever) rather than suspect NTL. If you configure your firewall to permit all access from 10.132.79.254, then these messages will go away.
rdhw is offline   Reply With Quote