[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: DoS attack
- To: or-talk@xxxxxxxxxxxxx
- Subject: Re: DoS attack
- From: Hans Schnehl <torvallenator@xxxxxxxxx>
- Date: Sun, 23 Nov 2008 10:58:52 +0100
- Delivered-to: archiver@xxxxxxxx
- Delivered-to: or-talk-outgoing@xxxxxxxx
- Delivered-to: or-talk@xxxxxxxx
- Delivery-date: Sun, 23 Nov 2008 04:59:06 -0500
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:date:from:to:subject :message-id:references:mime-version:content-type:content-disposition :in-reply-to:user-agent; bh=TPUnhAYbP3VbExDQg/j7CoJnqOvdIjQPR01kuzvXiJ4=; b=oajBSqCNe9KLAjgFsJOcb87G+kSsYtbu6sw7Gdri8LuAfYhrmtS7nGEDICSGiE8dtZ uflIybLTXQF2xl66HxiAL7TdvBGrm75EHsqldbGdhbwOn3PTWPCaa7xEENRuv8rVFbA1 VacqubqBwkbNVdXPity4mYw2LvGQdMnEgYNXc=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=date:from:to:subject:message-id:references:mime-version :content-type:content-disposition:in-reply-to:user-agent; b=sBejoaH3XOVuxkWvyp68/GFtUE6Ppji74njwG7i7M2Xznn1OQlsJe+uEAzKySEXdZL Fw4WnS4IjjdYjZx6aEqI0SJtJT3eV9OFoF+zBlTI1c30MPfRw6Fqq+5QcmO3wQo5bFTL 6FGhGa5kAn/+/83NbpURPkyPpNh4D+7snj89I=
- In-reply-to: <20081122234303.GI6497@xxxxxxxxxxxxxx>
- References: <48E376D0.50605@xxxxxxxxxxxxxxxxxxxx> <20081122234303.GI6497@xxxxxxxxxxxxxx>
- Reply-to: or-talk@xxxxxxxxxxxxx
- Sender: owner-or-talk@xxxxxxxxxxxxx
- User-agent: Mutt/1.5.18 (2008-05-17)
On Sat, Nov 22, 2008 at 06:43:03PM -0500, Roger Dingledine wrote:
> On Wed, Oct 01, 2008 at 03:10:40PM +0200, Karsten N. wrote:
> > the Tor node "gpfa" is for 10 hours target of a DoS attack.
> > The attack is running on at the moment.
>
> Hi Karsten,
>
> How did this resolve? Hopefully it ended after a while?
>
> Thanks,
> --Roger
Hi,
due to the overlay in timing (parallel start of an 'attack'
on my machine) I believe this to be the same issue.
With standard *x tools (no intelligence sorcery or alike, for the
paranoid) I managed to find the person in charge of the
machine and called him up.
He then basically 'pulled the plug' as the
box proved to be inresponsive and apparently had gone out of
control. Until failure there was a Tornode active.
The box was killed on 1 Oct 2008 at around 16:00 (UST).
Actually this is about the same time when the scroogle issue
a bit earlier was solved, when, according to this post
http://archives.seul.org/or/talk/Oct-2008/msg00014.html
an attack on scroogle ceased, so I believe this all was
the same issue.
According to the person in charge the reason was a misconfigured
or out of control machine.
If the above is not related to Karstens post, my apologies
for the noise.
I do not remember who I talked to, and I do not own any
logs, the person was surprised but friendly and almost immediately
responded to solve the matter.
Regards
Hans
>