[LINK] SCO legal case poses a conundrum on how it should defend a DDoS

[Glen Turner]

Actually, it's not too bad to defend from.

All that need be done is to put a new web server
for www.sco.com at a well-connected site.  The
server only serves small static redirect pages,
100 characters at the most.

The redirects then point to the real SCO site.

The worm doesn't follow redirects.

Of course, getting a SCO box to serve redirect
pages at the required rate is the challenge.  It
basically needs to be able to fill a 1Gbps pipe
and I don't think that SCO's UNIX can do that.

-- 
Glen Turner         Tel: (08) 8303 3936 or +61 8 8303 3936 
Network Engineer          Email: glen.turner at aarnet.edu.au
Australian Academic & Research Network   www.aarnet.edu.au