Comments on: IP Subnet Broadcast Amplification http://www.jacobdybala.com/ip-subnet-broadcast-amplification Dreams do come true... Fri, 19 Mar 2010 10:51:46 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: Ex-ATT Customer http://www.jacobdybala.com/ip-subnet-broadcast-amplification/comment-page-1#comment-3037 Ex-ATT Customer Thu, 14 Jan 2010 18:03:10 +0000 http://www.m3rlin.org/wordpress/?p=60#comment-3037 What, AT&T support did not know something. No way! BLAH. We have had AT&T DSL for less than 1 year and I have made 20+ support calls for various problems. Dozens of DSL disconnects a day, 250k download speeds, router needed to reboot every day. They tried new router, which the tech who installed it could not even figure out how to expose our static IP block, I had to show him. Honestly, AT&T DSL is poor, and their support is useless unless if you are a IT person since they just read a script and tell you to reboot. Oh problem fixed, goodbye. Until tomorrow! What, AT&T support did not know something. No way! BLAH. We have had AT&T DSL for less than 1 year and I have made 20+ support calls for various problems. Dozens of DSL disconnects a day, 250k download speeds, router needed to reboot every day. They tried new router, which the tech who installed it could not even figure out how to expose our static IP block, I had to show him.

Honestly, AT&T DSL is poor, and their support is useless unless if you are a IT person since they just read a script and tell you to reboot. Oh problem fixed, goodbye. Until tomorrow!

]]> By: Craig Cooper http://www.jacobdybala.com/ip-subnet-broadcast-amplification/comment-page-1#comment-2988 Craig Cooper Mon, 09 Nov 2009 21:37:34 +0000 http://www.m3rlin.org/wordpress/?p=60#comment-2988 Cayman 3000 series v6.3+ manual says : Subnet Broadcast Amplification Distributed DoS (Denial of Service) attacks often use a technique known as broadcast amplification, in which the attacker sends packets to a router’s subnet broadcast address. This causes the router to broadcast the packet to each host on the subnet. These, in turn, become broadcast sources, thereby involving many new hosts in the attack. The Cayman unit detects and discards any packets that would otherwise be transmitted to a subnet broadcast address. The Security Monitoring logs the event. PDF manual can be found at www.netopia.com/equipment/pdf/manuals/cayman63.pdf Cayman 3000 series v6.3+ manual says :
Subnet Broadcast Amplification
Distributed DoS (Denial of Service) attacks often use a technique known as
broadcast amplification, in which the attacker sends packets to a router’s
subnet broadcast address. This causes the router to broadcast the packet to
each host on the subnet. These, in turn, become broadcast sources,
thereby involving many new hosts in the attack. The Cayman unit detects
and discards any packets that would otherwise be transmitted to a subnet
broadcast address. The Security Monitoring logs the event. PDF manual can be found at http://www.netopia.com/equipment/pdf/manuals/cayman63.pdf

]]> By: m3Rlin http://www.jacobdybala.com/ip-subnet-broadcast-amplification/comment-page-1#comment-2729 m3Rlin Wed, 01 Oct 2008 14:00:47 +0000 http://www.m3rlin.org/wordpress/?p=60#comment-2729 Matt, What's the model number of the Netopia router that you're using? Matt,

What’s the model number of the Netopia router that you’re using?

]]> By: Matt http://www.jacobdybala.com/ip-subnet-broadcast-amplification/comment-page-1#comment-2728 Matt Thu, 25 Sep 2008 18:27:24 +0000 http://www.m3rlin.org/wordpress/?p=60#comment-2728 I'm having the same problems with my Netopia and it's kicking me off around 10 times an hour... and wireless is completely kicked off forcing a reboot of the router. AT&T as no answer... is there a fix for this? What did you end up doing to resolve your issues? I’m having the same problems with my Netopia and it’s kicking me off around 10 times an hour… and wireless is completely kicked off forcing a reboot of the router. AT&T as no answer… is there a fix for this? What did you end up doing to resolve your issues?

]]> By: Dave http://www.jacobdybala.com/ip-subnet-broadcast-amplification/comment-page-1#comment-2126 Dave Fri, 15 Feb 2008 04:42:26 +0000 http://www.m3rlin.org/wordpress/?p=60#comment-2126 It seems I'm not the lone ranger with this one. I followed the same path of discovery that you did, save that I found out what this "IP Subnet Broadcast Amplification" attack was from your post, and that it's so severe that it overloads my router, causing internet outages for up to several minutes, at least a few dozen times per day, and god forbid I should want to connect on a Saturday or Sunday. I even went so far as to report the router as "defective" equipment, to which AT&T responded that these attacks were causing the trouble, not the unit. So I'm going to have to replace their flawed equipment on my dime. One would think that customer service would... but I'm venting at the wrong person. Sry. :\ It seems I’m not the lone ranger with this one. I followed the same path of discovery that you did, save that I found out what this “IP Subnet Broadcast Amplification” attack was from your post, and that it’s so severe that it overloads my router, causing internet outages for up to several minutes, at least a few dozen times per day, and god forbid I should want to connect on a Saturday or Sunday. I even went so far as to report the router as “defective” equipment, to which AT&T responded that these attacks were causing the trouble, not the unit. So I’m going to have to replace their flawed equipment on my dime. One would think that customer service would… but I’m venting at the wrong person. Sry. :\

]]>