Newsflash
|
After the good job that we have done with this site in the past 2 months, we have decided to sell onemileaway.com and all its content. At this moment the website produces several unique visitors per month, and has an Alexa rank of 1,069,434 . The traffic is still increasing everyday due to the SEO-strategies we have applied. This is an excellent opportunity for everybody who would buy a site already launched. The price is only 20.000$ and it is negotiable. Email us if you are interested. Thanks. |
| Reflector: attack and defence |
|
|
|
| Written by cecco | |
| Tuesday, 22 January 2008 | |
It is another kind of DoS attack where the bad boy wants to attack a victim host making use of intermediate hosts called reflectors. The attacker (A) begins the TCP/IP three way handshake sending a SYN with the return address of the victim (B) to every reflectors (C). Thus, each reflectors sends the corresponding ACK to the victim which drops all of them. This procedure will consume all the victim’s bandwidth who will be unable to establish any further legal connections until the attack has terminated.
 The defence here is not at the victim’s host side, but at the Internet Service Provider side. In fact an ISP could implements a router policy in which any host that wants to establish a new connection must include in the return address a destination host which is in the same subnet as the source host. With this solution in mind you can imagine that if an attacker wants to consume the victim bandwidth then all the hosts involved in this attack must be on the same subnet. So the bad guy has the use of only a small number of reflectors, thus he will almost certainly failed. |
| < Prev | Next > |
|---|
