karlnet devices do not support DoS attack countermeasures
and can get blind easily, sometimes TurboCell compressing
algorithm will overload roater or gateway easily. I propose to
create maximum packet count to an interface parameter list.
DoS attacks are normally done via large number of small
packets witch give sometimes onle few megabits per second
bitrate but with thousands of paclets per second.
> -----Original Message-----
> From: karlnet-bounces@WISPNotes.com
> [mailto:karlnet-bounces@WISPNotes.com]On Behalf Of Peter Dordik
> Sent: Wednesday, August 13, 2003 5:59 PM
> To: Karlnet Mailing List
> Subject: [Karlnet] Posibble DoS?
>
>
> Hi,
>
> Yesterday 12.8.2003 at about 17:30 GMT I hade strange trouble
> with several
> kbridge based devices (Orinoco, Karlnet) loaded with firmware
> 3.xx and 4.xy
> Devices are in different areas. Units were UP, but they had
> uptime 0:00:00 and
> with different problems.
>
> Is possible, that we have new DoS attack. I had SNMP access
> allowed only from
> several known hosts. I have IP filters now (at routers) so I
> think, that this
> will help me.
>
> We have latest AP Orinoco firmware 3.95 and for COR-ROR 4.14
> (at least year old)
> although AP500 and AP1000 were still in production this year.
> I am thinking if
> there is some waranty for software or not.
>
> Anyone else had trouble yesterday?
>
> _______________________________________________
> Karlnet mailing list
> Karlnet@WISPNotes.com
> http://lists.wispnotes.com/mailman/listinfo/karlnet
|