Denial of Service Attack Mitigated

     We were hit with a denial of service attack that exhausted router resources.  This started just before 6AM this morning.  It has been mitigated by adding additional firewall rules around 11:15AM.  What made this difficult to troubleshoot was the traffic was being blocked by a firewall rule but on the outbound interface instead of the inbound one so the CPU was overloaded by it making it difficult to get any response from the router.  I will be restructuring firewall rules so invalid traffic is blocked on the inbound interface to prevent a future attack of this same type.

     Please do not rely on the Eskimo North Users group on Yahoo for information during an outage.  It often will not allow me to login or is not responsive so I can’t post.  There is also someone who posts to it maliciously so information you get there may not be accurate.  This morning inaccurate information was posted suggesting this was “just like 2009”, no it was in NO WAY like 2009, the phones worked, information was available there, and I also posted on Facebook where I could login.

     The most direct source of information is your phone, call us.  When something is down, I leave a voice message so at least you can know what is happening.  After that, check our Facebook page at https://www.facebook.com/EskimoNorth, which unlike the Yahoo group, is controlled by us and thus will have accurate information.