[Mimedefang] monkeys.dom UPL being DDOSed to death

[John Von Essen]

Hmmm...

DDOS attacks are something that DNSBL providers are going to have to 
deal with. No offense, but the reason why these DNSBL's are going down 
might be due to the fact that they are easy targets.

I am not familiar with the infrastructure being used at monkeys, but if 
it is a T1 with a couple Linux boxes, then there is no surprise that it 
was killed.

Now... If you have a nice fat pipe, good firewall and load balancing 
hardware, good IDS systems that prevent all the spoofed packets from 
entering network, then it would be hard to take down.

These DDOS attacks are really a threat to the small (but capable) 
resources out there. It all comes down to money. The DNSBL's don't have 
big time cash - even though they should by virtue of what they are 
doing. For example, in SpamAssassin you are only supposed to activate 
SPAMCOP if you donate to them. In reality, how many people actually 
follow that honor system.

-John


On Tuesday, September 23, 2003, at 01:58 PM, Jon R. Kibler wrote:

> Greetings to all:
>
> I have some really sad news. I just got off the telephone with Ron 
> Guilmette who runs the monkeys.com Unsecured Proxies List DNSBL. I 
> hate to say it, but monkeys.com has been killed. It has been DDOSed to 
> death.
>
> Ron says that every aspect of his network is undergoing a massive DDOS 
> attack from thousands of IPs -- apparently many/all spoofed. He has 
> tried to get law enforcement to investigate, but to no avail. He 
> indicated that this is probably the end of his service.
>
> This makes two DNSBLs that have been DDOSed to death recently. Which 
> one is next? NJABL? ORDB?
>
> The computer security industry really needs to figure out how to get 
> law enforcement to take these attacks seriously. It would only take a 
> few good prosecutions to put an end to these types of attacks. Any 
> thoughts/suggestions?
>
> This is really a dark day for those of us fighting spam. I looks like 
> the spammers have won a BIG battle. The only question now is who will 
> be the causality in this war?
>
> Jon R. Kibler
> A.S.E.T., Inc.
> Charleston, SC  USA
>
>
>
>
> ==================================================
> Filtered by: TRUSTEM.COM's Email Filtering Service
> http://www.trustem.com/
> No Spam. No Viruses. Just Good Clean Email.
>
>