
Security Basicsmailing list archives
RE: IP announce DOS
From: "Thomas Ng" <thomasng () ida gov sg>
Date: Fri, 10 Jun 2005 11:50:03 +0800
Hi,Shouldn't it be that each ISPs have their own big blocks? Chances are,the class C given to you is in the middle of one of these huge blocks. Iam not sure what is your agreement with the old and new ISP, but I don'tthink it is that simple to transfer the same set of IPs from one ISP toanother. It is technically possible ... but I don't think it is thatsimple.Usually what I do when I change ISP is to just ask for a new set of IPsfrom the new ISP, change the DNS, allow the TTLs to run out and shift tothe new sets of IP address. If you play with the DNS correctly, you canget minimal downtime, dependent on size and sophistication of yournetwork.Rgds,Thomas
-----Original Message-----From: Alex Thurlow [mailto:buddychrist () gmail com]Sent: Thursday, June 09, 2005 5:24 AMTo: 'security-basics () securityfocus com'Subject: IP announce DOSImportance: HighI'm not positive this is the correct list to ask, but it is a securityconcern, so I thought I would. The company I work for had T1 linesrunning to our office provided by a local provider. We had our own Cblock of IPs being announced by them and routed to us over those T1s.Our relationship with them went sour (for many reasons I won't get
into
here), and we had to move to a different provider. We had the routingswitched over to them. Everything was fine. Here it is a few weekslater, and suddenly our old provider starts announcing these IPs
again.
The end result is a partial DOS attack (hence writing to this list) assome people can't reach us. They won't stop the announcement. I
don't
know all the details on what they've said there as it's now gone toexecutives and legal people dealing with them. Is there anything we
can
do here from a network standpoint? Someone we can report them to?
How
do people protect themselves from just anyone announcing IPs that
aren't
theirs?Thanks in advance,Alex Thurlow________________________________________SKYLISTEmail Marketing Solutions that DeliverService You Can TrustYou are receiving this email messagefrom a representative of SKYLIST, Inc.13171 Pond Springs Road, Austin, TX 78729Toll Free: 877.250.2922To cease all communication with SKYLIST, visithttp://www.skylist.net/unsubscribeor send an email to unsubscribe () skylist com
Current thread:
- IP announce DOSAlex Thurlow (Jun 09)
- Re: IP announce DOSMicheal Espinola Jr (Jun 09)
- RE: IP announce DOSBurton Strauss (Jun 10)
- RE: IP announce DOSDavid Gillett (Jun 09)
- RE: IP announce DOSThomas Ng (Jun 10)
- RE: IP announce DOSBurton Strauss (Jun 10)
- <Possible follow-ups>
- RE: IP announce DOSAndrew Shore (Jun 10)
- RE: IP announce DOSDavid Gillett (Jun 13)
- Re: IP announce DOSAlex Thurlow (Jun 10)
- Re: Re: IP announce DOScrabdog (Jun 13)
- Re: IP announce DOSMicheal Espinola Jr (Jun 09)