SYN floods - possible solution? (fwd)

Dima Volodin dvv at sprint.net
Fri Sep 13 15:59:39 UTC 1996


alex at relcom.EU.net writes:
> [...]
> He can send
> DNS request with YOUR src address,
> [...]

Apart from the obvious sexism :-) of the message let me point out that
there are some other tricks one can play with DNS, e.g. throwing in
any addresses for some other's servers in additional records in your DNS
reponces. We are hit by this DNS/named deficiency _every freaking day_.

> Aleksei Roudnev, Network Operations Center, Relcom, Moscow

Dima





More information about the NANOG mailing list