View Single Post
  #28  
Old 07-27-2013, 04:54 PM
Glorindale Glorindale is offline
Sarnak


Join Date: May 2010
Posts: 209
Default

Quote:
Originally Posted by kingsBlend [You must be logged in to view images. Log in or Register.]
I'm sure there are plenty of network security specialists here, which given the right information, could easily put a stop to it.
If it is line saturation like Rogean says there isn't anything he can do about it since that is the ISP's equipment. It isn't just about knowledge. He can ask them to do something about it but it is ultimately up to them which course of action to take. If this is affecting their other customers as well they might be willing to do something. Or they might have to put pressure on their upstream provider. However, Rogean cannot force them to do anything and certainly has no influence with his ISP's provider.

My experience with problems like this is they are not really worried about it unless you are a large customer or if it affects many customers. However, it sounds like it is only affecting project1999's link to the ISPs network.

Even if Rogean installed a tricked out firewall with IPS capabilities it wouldn't matter cause the attacker is sending so much traffic it is saturating his pipe. If Rogean paid for a bigger pipe it would likely get saturated, it would just take that many more DNS responses to do it.
Last edited by Glorindale; 07-27-2013 at 05:00 PM..