large organization nameservers sending icmp packets to dns servers.

Thu Aug 9 07:55:32 UTC 2007

On Wed, Aug 08, 2007 at 03:20:56PM -0700,
 william(at)elan.net <william at elan.net> wrote 
 a message of 23 lines which said:

> How is that an "anti DoS" technique when you actually need to return
> an answer via UDP in order to force next request via TCP?

Because there is no amplification: the UDP response packet can be very
small.