Risk Biz has more details [1].. Recommend the podcast! * IBM and the ABS were offered DDoS prevention services from their upstream provider, NextGen Networks,

Risk Biz has more details [1].. Recommend the podcast! * IBM and the ABS were offered DDoS prevention services from their upstream provider, NextGen Networks, and said they didn't need it. * This plan was activated when there was a small-scale attack against the census website. * Unfortunately another attack hit them from inside Australia. This was a straight up DNS reflection attack with a bit of ICMP thrown in for good measure. It filled up their firewall's state tables. Their solution was to reboot their firewall, which was operating in a pair. * They hadn't synced the ruleset when they rebooted the firewall so the secondary was essentially operating as a very expensive paperweight. This resulted in a short outage. [1] https://risky.biz/censusfailupdate/ https://risky.biz/censusfailupdate/