Return-Path: root@announce.speakeasy.net Delivery-Date: Fri May 30 17:44:00 2003 Return-Path: Received: from cmu4.acs.cmu.edu (CMU4.ACS.cmu.edu [128.2.11.4]) by gs176.sp.cs.cmu.edu (8.11.6/8.11.0) with ESMTP id h4ULi0D07295 for ; Fri, 30 May 2003 17:44:00 -0400 Received: from announce.speakeasy.net (announce.speakeasy.net [216.254.0.41]) by cmu4.acs.cmu.edu (8.12.9/8.12.3.Beta2) with ESMTP id h4UKZpor009892 for ; Fri, 30 May 2003 16:35:51 -0400 Received: (from root@localhost) by announce.speakeasy.net (8.11.6/8.11.6) id h4UKZqo32295; Fri, 30 May 2003 13:35:52 -0700 Date: Fri, 30 May 2003 13:35:52 -0700 Message-Id: <200305302035.h4UKZqo32295@announce.speakeasy.net> To: Jcl@cmu.edu From: Speakeasy Subject: [ Speakeasy ] Notice: Network Outage in NYC - Recap X-Spam-Status: No, hits=-0.5 required=5.0 tests=DEAR_SOMEBODY version=2.20 X-Spam-Level: Dear Speakeasy Member, We sincerely apologize for the network outages beginning Wednesday afternoon and continuing into Thursday morning. Included for your reference is further information on the nature of this outage and how it was resolved. Wednesday afternoon, we received a complicated Distributed Denial of Service (DDOS) attack and immediately began working with our upstream providers to resolve it as soon as possible. The cause for the attack was not apparent, but subsided after multiple filters were put into place. After resolving this, it was necessary to go ahead with our planned outage during the Maintenance Window that night in order to complete our NYC POP Upgrade. Thursday morning, we experienced a simpler series of two large DDOS attacks, one consisting of 600-800MB that we blocked by the filtering implemented last night and the other consisting of 200-300MB attack on a specific customer's IP address, which we immediately blocked. This final attack has been identified as the result of this specific customer's activities online and we are gathering information to file a complaint with the FBI against the attackers involved. We are rigorously and actively investigating new methods and technology options that will assist us in resolving these types of attacks more quickly in the future. Again, we apologize for the inconvenience that these attacks may have caused you and appreciate your patience while we worked to resolve. The Speakeasy Crew 800.556.5829 http://www.speakeasy.net/myspeak