DNS Amplification Attacks

Peter Dambier peter at peter-dambier.de
Thu Mar 23 13:07:36 UTC 2006


Please dont take ICANN censoring "XN--55QX5D.", "XN--FIQS8S." and
"XN--IO0A7I." serious. Ment as a joke. Did not make it. Sorry!


Joseph S D Yao wrote:
> 
> "You keep using that word.  I do not think it means what you think it
> means."
> 

My dictionary says censor is from latin. A magistrate, lets call him a
polititian like

http://odem.org/akteure/juergen-buessow.de.html
http://www.wdr.de/themen/politik/nrw/demo_internetzensur/index.jhtml
http://www.heise.de/tp/r4/artikel/12/12733/1.html

Sorry I have this guy only in german.

This guy odered some local ISPs to making sites unavailable mostly by
forging DNS entries kept in their local resolvers. I was told by
peoply unvolontarily working for him that more than 6000 sites were
involved. Quite a lot of them collateral damage.

The latin version says this guy is taking things out of books so the
ordinary roman was not annoyed by distateful things. I guess you see
the irony.

Büssow ment to keep journalists from seeing sites in the USA and
Canada that would be prosecuted in Germany.

His helpers felt invited to do a lot more good and played some
tricks on their "friends". In Germany we do not pick a leave from a
tree. We cut the tree and dig out the root.

If you have to live with a resolver that is answering as slowly as
this one

; <<>> DiG 9.1.3 <<>> www.peter-dambier.de @www-proxy.UL1.srv.t-online.de
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1092
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.peter-dambier.de.          IN      A

;; ANSWER SECTION:
www.peter-dambier.de.   6000    IN      A       82.165.62.90

;; Query time: 2118 msec
;; SERVER: 217.237.150.141#53(www-proxy.UL1.srv.t-online.de)
;; WHEN: Thu Mar 23 13:59:57 2006
;; MSG SIZE  rcvd: 54

my local ISP, then you feel tempted to use a foraign resolver. So
for me running my own independent resolver was a must.

But many of my colleages are not computerscience people. Many of the
poor buggers are running some flavour of windows. For them it is life
behind the big chinese firewall if they cannot find an open resolver.

Please excuse if I overreact a bit on this matter.

Cheers
Peter and Karin

(Karin is a writer too, but she is not the computer woman :)


-- 
Peter and Karin Dambier
The Public-Root Consortium
Graeffstrasse 14
D-64646 Heppenheim
+49(6252)671-788 (Telekom)
+49(179)108-3978 (O2 Genion)
+49(6252)750-308 (VoIP: sipgate.de)
mail: peter at peter-dambier.de
mail: peter at echnaton.serveftp.com
http://iason.site.voila.fr/
https://sourceforge.net/projects/iason/




More information about the NANOG mailing list