10/25/04 -- Loss of Connectivity

[FH-John]

We are facing another DDoS attack towards WIN2. We're working to mitigate the issue, both at our network, and with assistance from Internap. The DDOS attack has made our switch become unresponsive at this moment. We have lost connectivity at around 1:50 PM. No ETA as to when this can be resolved. We are working to resolve this as soon as possible.

[FH-Dave]

We are still working with Internap to mitigate this problem. WIN2 shared hosting IP, the target of the DDOS attack, will be temporarily null routed.

[FH-Dave]

Customers may discuss this on our customer only forum at http://forums.fluidhosting.com/showthread.php?t=1341

[FH-Dave]

At this moment, all traffic should resume normal. We still have 66.150.196.200 null routed until we install a firewall between internap's core switch and our own switch to filter all incoming traffic. The firewall is being configured as we speak. There might be ver short downtime when we install the firewall. We will update everybody later on when we are ready to put in the firewall.

[FH-Dave]

Firewall is already in place and we have populated the firewall with some rules. We are currently waiting for Internap to re-route 66.150.196.200. Please be patient just a little bit longer.

[FH-Dave]

66.150.196.200 has been re-routed again. We are receiving a large influx on SYN packages. We are blocking them on our firewall now.

[FH-John]

:thumbup: to Dave, and Hary on this!

And, another :thumbup: to Chip, and the rest of the Internap team!

[FH-Dave]

The new firewall is doing very nicely. It's blocking a lot of IPs already, and blocking them very efficiently. Firewall load is still incredibly low.