Anti-DDOS Alliance In The Works?

Rackemup writes: "This article on ZDNET says McAfee and some anti-DDOS vendors are finally teaming up to address DDOS attacks and Code-Red-like network scanning. Seems like they're finally catching on that a purely reactive approach to Internet and virus attacks isn't going to cut it anymore, even after all the media coverage of these latest virus attacks there are still loads of zombie machines out there merrily scanning away, looking for others to infect."

Re:The hardware companies need to be involved too

[Moosifer]

Not a chance that we're going to see routers doing this anytime soon, especially not the Big Ass (tm) Cisco or Juniper routers. It's simply too computationally expensive for them to do this (today, at least) and having this feature would put them at a competitive disadvantage in terms of the # of billions of packets they can push in 23 nanoseconds.

After all, it's marketing data that drives the industry - not the product's actual worth.

Re:warning: may require ISPs doing work

[zyklone]

So the next time you begin playing q3 multiplayer your ISP cuts your connection.

As for the grc.com stuff. He got countless offers of help he just decided that it would be a better article if he ignored them.

You really don't want the ISP monitoring everything going to/from your computer. Do you really trust them enough for that? A sudden increase of traffic can't be marked as a DDoS attack. It might just be that your site was linked from slashdot.

If everyone would just patch their systems we would not have these problems. There are too many incompetent system administrators out there.

On the subject of zombie machines...

[acoustix]

"...there are still loads of zombie machines out there merrily scanning away, looking for others to infect."

I think there should be a law against this sort of thing. Think about it. You should get 10 days to patch your equipment and after 10 days the owner of the equipment should pay fines for wasting bandwidth and trying to infect other hosts.

I use a dial-up connection on a class C address and I'm still getting scaned for port 80 about 70 times in one day. I never got traffic like that before.

It seems to me that people are just running their boxes and not checking up on them or patching them and it irritates me. Oh well....