Server attack

Discussion in 'Site & Server Administration' started by login, Jan 31, 2007.

0
  1. #1
    Hi.

    I have gotten attacked on my server by an attack based on flooding the network interface with ICMP packets.
    I do not know what this means, the support told me this.

    How is this happening and what is the best thing to do ?

    Thanks.
     
    login, Jan 31, 2007 IP
  2. FireStorM

    FireStorM Well-Known Member

    Messages:
    2,579
    Likes Received:
    88
    Best Answers:
    0
    Trophy Points:
    175
    #2
    Maybe because you do not have Firewalls etc ... This post should have been in Server administration
     
    FireStorM, Jan 31, 2007 IP
  3. login

    login Notable Member

    Messages:
    8,849
    Likes Received:
    349
    Best Answers:
    0
    Trophy Points:
    280
    #3
    Sorry, I would be happy if a mod can move it:)

    Its a VPS at Servint, I expect them to have proper firewalls.
     
    login, Jan 31, 2007 IP
  4. tanfwc

    tanfwc Peon

    Messages:
    579
    Likes Received:
    11
    Best Answers:
    0
    Trophy Points:
    0
    #4
    You should have your own layer of firewall. You willing to pay for a installations/configuring of a proper firewall?
     
    tanfwc, Feb 5, 2007 IP
  5. gemini181

    gemini181 Well-Known Member

    Messages:
    2,883
    Likes Received:
    134
    Best Answers:
    0
    Trophy Points:
    155
    #5
    Are you using Cisco routers?
    This came up in Google

    Cisco - Characterizing and Tracing Packet Floods Using Cisco Routers
    Most of the traffic that arrives on the serial interface consists of ICMP echo reply packets. This is probably the signature of a smurf attack, ...
    www.cisco.com/warp/public/707/22.html - 41k - Cached - Similar pages
     
    gemini181, Feb 5, 2007 IP