Home Page
   Articles
       links
About Us    
Traders        
Recipes            
Latest Articles
Broadband....
Page Previous  1, 2, 3
 
Post new topic   Reply to topic    Downsizer Forum Index -> IT Matters
Author 
 Message
mrutty



Joined: 28 Oct 2004
Posts: 1578

PostPosted: Sat Feb 26, 05 9:57 pm    Post subject: Reply with quote
    

Code Red is a noisy worm that scans the entire IP address range and bought the 'Net' to almost a stand still. Whist it's true to say it was looking for hosts it still pinged machines that had to respond. Simple example that is all. On a large corperate network it took 53 machines to bring a Gigabit backboned network to it's knees. On BT Openwoe you'll have more machines than that in the IP range pinging, if you can drop the packets before it hits any IP aware machine all the better.

(Got paid a bonus for that weeks work )

Oh and yes it was the White House, from memory they hardcoded the IP address so the White House just moved it's IP address and the service providers set the old address to dev\null

dougal



Joined: 15 Jan 2005
Posts: 7184
Location: South Kent
PostPosted: Sat Feb 26, 05 10:30 pm    Post subject: Reply with quote
    

mrutty wrote:
... On a large corperate network it took 53 machines to bring a Gigabit backboned network to it's knees. On BT Openwoe you'll have more machines than that in the IP range pinging, if you can drop the packets before it hits any IP aware machine all the better.

That would be 53 compromised PC's...
No argument that such *external_requests* are best handled by being ignored at the router/firewall
BUT
The nuisance to Sean's iMac of having its (software) firewall pinged a dozen (or even 200, or 2,000...) times an hour is actually going to make VERY little impact on his surfing.
That's not going to deny *him* service.
And there's VERY little chance his Mac being compromised by anything similar.
Since he is hosting no servers, a router (any router) would provide an extra layer of security - which perhaps is redundant, but I'm not convinced there is any advantage -- to *Sean* -- in his having an additional full-featured, stand alone firewall that goes beyond packet state checking, let alone a proxy server...

mrutty



Joined: 28 Oct 2004
Posts: 1578

PostPosted: Sat Feb 26, 05 10:58 pm    Post subject: Reply with quote
    

Each to his own

sean
Downsizer Moderator


Joined: 28 Oct 2004
Posts: 42207
Location: North Devon
PostPosted: Mon Feb 28, 05 2:09 pm    Post subject: Reply with quote
    

Thanks for all the advice everyone. I'll go and have a word with our local shop and see what he sells/charges.

Post new topic   Reply to topic    Downsizer Forum Index -> IT Matters All times are GMT
Page Previous  1, 2, 3
Page 3 of 3
View Latest Posts View Latest Posts

 

Archive
Powered by php-BB © 2001, 2005 php-BB Group
Style by marsjupiter.com, released under GNU (GNU/GPL) license.
Copyright © 2004 marsjupiter.com