worldwide DDOS (sql server fun)

24 Jan 2003

      http://www.nextgenss.com/advisories/mssql-udp.txt

Time to start applying some filters at your edges. This has taken some 
big networks off the air in the US (and at least one in NZ).

term deny-dos {
     from {
         packet-length 404;
         protocol udp;
         destination-port 1434;
     }
     then {
         count codered-4;
         discard;
     }
}
term allow-rest {
     then accept;
}

-
To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz
where the body of your message reads:
unsubscribe nznog

worldwide DDOS (sql server fun)

Joe Abley