DNS Amplification Attacks
Peter Dambier
peter at peter-dambier.de
Thu Mar 23 13:07:36 UTC 2006
Please dont take ICANN censoring "XN--55QX5D.", "XN--FIQS8S." and
"XN--IO0A7I." serious. Ment as a joke. Did not make it. Sorry!
Joseph S D Yao wrote:
>
> "You keep using that word. I do not think it means what you think it
> means."
>
My dictionary says censor is from latin. A magistrate, lets call him a
polititian like
http://odem.org/akteure/juergen-buessow.de.html
http://www.wdr.de/themen/politik/nrw/demo_internetzensur/index.jhtml
http://www.heise.de/tp/r4/artikel/12/12733/1.html
Sorry I have this guy only in german.
This guy odered some local ISPs to making sites unavailable mostly by
forging DNS entries kept in their local resolvers. I was told by
peoply unvolontarily working for him that more than 6000 sites were
involved. Quite a lot of them collateral damage.
The latin version says this guy is taking things out of books so the
ordinary roman was not annoyed by distateful things. I guess you see
the irony.
Büssow ment to keep journalists from seeing sites in the USA and
Canada that would be prosecuted in Germany.
His helpers felt invited to do a lot more good and played some
tricks on their "friends". In Germany we do not pick a leave from a
tree. We cut the tree and dig out the root.
If you have to live with a resolver that is answering as slowly as
this one
; <<>> DiG 9.1.3 <<>> www.peter-dambier.de @www-proxy.UL1.srv.t-online.de
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1092
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;www.peter-dambier.de. IN A
;; ANSWER SECTION:
www.peter-dambier.de. 6000 IN A 82.165.62.90
;; Query time: 2118 msec
;; SERVER: 217.237.150.141#53(www-proxy.UL1.srv.t-online.de)
;; WHEN: Thu Mar 23 13:59:57 2006
;; MSG SIZE rcvd: 54
my local ISP, then you feel tempted to use a foraign resolver. So
for me running my own independent resolver was a must.
But many of my colleages are not computerscience people. Many of the
poor buggers are running some flavour of windows. For them it is life
behind the big chinese firewall if they cannot find an open resolver.
Please excuse if I overreact a bit on this matter.
Cheers
Peter and Karin
(Karin is a writer too, but she is not the computer woman :)
--
Peter and Karin Dambier
The Public-Root Consortium
Graeffstrasse 14
D-64646 Heppenheim
+49(6252)671-788 (Telekom)
+49(179)108-3978 (O2 Genion)
+49(6252)750-308 (VoIP: sipgate.de)
mail: peter at peter-dambier.de
mail: peter at echnaton.serveftp.com
http://iason.site.voila.fr/
https://sourceforge.net/projects/iason/
More information about the NANOG
mailing list