[dns-operations] First experiments with DNS dampening to fight amplification attacks

Lutz Donnerhacke lutz at iks-jena.de
Thu Oct 25 16:43:51 UTC 2012


* Lutz Donnerhacke wrote:
> If they are optimal or not is still an open question. But the patch is
> useable now. Far from perfect or finished, but used in practice.

I was able to collect some statistics and keep an eye on the attacks itself.
Interestingly the attackers seem to honor the RRL defaults and apply their
attacks in a way to render this patch useless.

http://lutz.donnerhacke.de/eng/Blog/DNS-Dampening-under-the-microscope



More information about the dns-operations mailing list