Attached to Project— Anti-DDoS

Task Type	Modernization
Category	Paris DC1
Status	CLOSED
Percent Complete

Details The Arbor TMS boxes manage port 53 via a
DNS AUTH specific protection. The base
configuration forces the TCP/SYN
protection to ignore port 53.

This causes some problems when
port TCP/53 is attacked.

We have set up a customised
configuration which enables TCP/53
packet filtration on the TCP AUTH
but not on the DNS AUTH.

# services tms registry main clear mitigation.tcp_syn.ignore_dst_ports
Registry key 'mitigation.tcp_syn.ignore_dst_ports' successfully cleared.