Denial of service Attack.

Wed Feb 8 13:39:38 UTC 2006

Hello.

For the last couple of days we have intermittently been
experiencing a (>1gbps) denial of service attack.  I want to
apologize to anyone whose DNS servers have been (ab)used in
the attack, and let you know what is occurring.

The attacker is forging our source address on dns requests,
and the DNS reply is routing to us.  I promise, we're not
attacking your dns servers.

Please take a moment to consider implementing RPF checks to
prevent these type of forged packet attacks.

Advice is welcomed both on-list and off.

Thanks,
Ejay Hire
ISDN-Net Network Engineer