[openbeosnetteam] Re: what about attacks?

> in any case, I was wondering, if we (umm, you) could add tests (sort 
> of like extreme 
> programming unit tests) so that denial of service attacks won't 
> happen..

Truth is, there is no way to do that. If the attacker has a large 
enough pipe (or a large number of small connections adding up) they may 
not take your machine down, but they can everload your link and you 
won't be getting any real requests anyway. Also even if you're doing 
packet filtering on your machine he machine still has to process each 
packet that arrives to see if it is to be discarded or not so, again, a 
large number of packages can get your machine to its knees.

The only real solution top DoS and DDoS attacks is to find someone with 
a bigger pipe than you between you and the attacker (usually your 
access provider) and ask them to block the packages at their routers.

-Bruno


--
Fortune Cookie Says:

One is not superior merely because one sees the world as odious.
                -- Chateaubriand (1768-1848)


Other related posts: