[dns-operations] does anybody know why yahoo+akamai are doing this?

Edward Lewis Ed.Lewis at neustar.biz
Thu Mar 23 19:59:34 UTC 2006


At 19:08 +0000 3/23/06, Paul Vixie wrote:

>reflection is enough.  doesn't have to be amplified to be painful.  the fact
>that it's from udp/53 will mean it gets through some victim rate limiters
>where an icmp reply (or other non-amplified reflective attacks) would not.

Can't the originator of the attack source the packets on 53?

(Editorial note - yeah, this has strayed quite a distance from the 
original question, but I'm trying to make sure the problem is clear.)

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis                                                +1-571-434-5468
NeuStar

Nothin' more exciting than going to the printer to watch the toner drain...



More information about the dns-operations mailing list