sync flood and ip spoofing attack help

Printable View

May 4th, 2005, 08:07 PM
garytan

sync flood and ip spoofing attack help

Dear all

I have an urgent short term project, USD 5k to solve for sync flood and ip spoofing issue, Plz acknowledge if you are interested

Thank you
May 4th, 2005, 08:12 PM
DjM

Are you asking for 'consulting' help or are you asking what you can do to stop the attack yourself?

Cheers:
May 4th, 2005, 08:20 PM
zENGER

Unplug your machine from the internet and any other networks. Syn floods and ip spoofing will cease on that machine. Now please deposit 5k USD into my account. :P
May 4th, 2005, 08:58 PM
garytan

DjM, it is offering, you can say is 'consulting'. perhaps you have some suggestions here first
May 4th, 2005, 09:02 PM
zENGER

Why don't you share some background as to what it is you are really trying to accomplish here. Being vague and hiding in the shadows won't get your many answers.
May 4th, 2005, 09:09 PM
garytan

facing ip spoofing, sync flood which caused IDP crashed at DC
May 4th, 2005, 09:12 PM
DjM

What firewall do you have in place? Does the spoofed IP change or is it the same all the time. How do you know it's spoofed? What OS are we talking about here? How long has this been going on?

Cheers:
May 4th, 2005, 09:20 PM
garytan

"checkpoint" firewall, many fake ip so I would say it changes all the time. OS redhat AS3, it has happened since last few days

The firewall is basically behind the IDP

cheers
May 4th, 2005, 09:23 PM
garytan

added, the attack is on the IDP which caused crashed few times
May 4th, 2005, 09:29 PM
DjM

So let me get this straight, the system that is being attacked is in front of the Firewall or behind it? A checkpoint firewall (when configured correctly) is able to detect and drop these kind of attacks.
May 4th, 2005, 09:33 PM
garytan

is behind (commonsense :) ), which is what we thought of with proper configuration it supposed to be fine too... IDP is another level of protection, but it still crashed
May 4th, 2005, 09:39 PM
DjM

Do you have "SmartDefence" enabled on you checkpoint firewall?

Cheers:
May 5th, 2005, 09:24 AM
garytan

is behind, commonsense. We thought of so with proper configuration... but it didn't

Also, it basically crashed the IDP first, the first level protection before even reach to the firewall
May 5th, 2005, 02:59 PM
DjM

Quote:

Originally posted here by garytan
is behind, commonsense. We thought of so with proper configuration... but it didn't

Also, it basically crashed the IDP first, the first level protection before even reach to the firewall

Can you explain what this IDP system is and why it's required and why its in front of your firewall (which is seems it is)? **** man, your running a checkpoint firewall, let it do what its designed to do. If it's not configured right, get a good checkpoint consultant to come in and set it up the way it should be.