[dns-operations] First experiments with DNS dampening to fight amplification attacks

Dobbins, Roland rdobbins at arbor.net
Wed Oct 31 01:52:05 UTC 2012

On Oct 31, 2012, at 4:37 AM, Florian Weimer wrote:

> Reflection attacks do not use totally random source addresses, so the typically state exhaustion vector does not necessarily apply.

There are many more types of attacks other than reflection/amplification attacks, though, and it's those to which I was referring - sorry for being unclear.

Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton

More information about the dns-operations mailing list