Web Hosting Talk







View Full Version : DoS


aniport
07-12-2004, 10:20 PM
I should have written about this earlier, but I didn't feel it was necessary as I wanted to be a good semaritan and keep things under the table/secret for the other party's benefit. However, I realize by their business practice that this information needs to be made public.

I received a high level of traffic from ThePlanet (around 3Mbps) of UDP packets. I received packets from other ISPs as well. However, as soon as I contacted their abuse departments, the packeting ceased as they had dealt with the issue immediately. However, at ThePlanet, it was a different story.

I contacted them via e-mail and there was no response. Then, I attempted to contact them on the phone and spoke for awhile as they wasted my cell phone minutes.

To my dismay, the man on the phone said "Oh yeah, don't worry the packets are only reaching speeds of up to 3Mbps. That doesn't qualify as a DoS attack. So, we'll handle this issue tomorrow."

The fact is, 3Mbps is actually expensive. In addition, I did not want this issue dealt with "tomorrow." They were packeting me (one of their clients - who probably had a box that was insecure) but would not do anything about it.

I was furious and angry. Finally, this issue was resolved after threats of the issue to be posted on WHT were made. However, guess what, it should have never gone that far in the first place.

That day I used quite a bit of bandwidth, had my IP null routed twice, and other issues.

Phrost
07-12-2004, 10:54 PM
Did you ever ask your ISP to block the traffic at their routers before it reached you?
-Phrost

jsw6
07-12-2004, 11:05 PM
It should be trivial for your host to discard or rate-limit UDP traffic from a fixed source IP. You gave some information about your dealings with ThePlanet but none about inquiries to your own ISP. Could you provide more details?