Re: (ASCEND) Protecting IPs from Nukes on 4048 & 6248

[bcurnow <bcurnow@sonnet.com>]

A lot of the Windows nukes can be prevented by blocking packets coming in
to your network that have a source address equal to one of your blocks.
If the source is actually on one of your dial up ports, however, you would
have to put filters on each dial up port in the Ascend itself..  The great
majority of the time, and especially if you suspect an external entity,
the attacks are coming in over your network.

Another option is to recommend your users change operating system vendors.

----------------- Brian  Curnow ----------------

On Wed, 9 Jun 1999, Rob Smarzik wrote:

> We have been having someone nuke our dialup ports on our Max 4048 and 6248
> boxes. I can not say if it is a true Nuke, we will have users all call in
> from a certain time frame and say they were locked up. They would restart
> there machine and dial back in and connect fine but can not surf the web.
> Once we delete and recreate the dial up networking dial up account on the
> customers machine using the same name for the icon it works perfect. We do
> not think it is just the dial up adapter software because they are all the
> exact problem from a 30 min. time frame.
> Has anyone else had this problem and if so what did you do to prevent in
> the future. Is there also anyway to monitor and log any nukes or attacks on
> the dial up ports on our end. We had a new tech come over from a competitor
> and they were not happy about it and said they would make us pay and could
> reek havock on our system for stealing their employee. Any suggestions
> would be thankfull.
> All in the days life of an ISP.
> 
> 
> ++ Ascend Users Mailing List ++
> To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd:	<http://www.nealis.net/ascend/faq>
> 

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>