DNS Amplification attack?

Christopher Morrow morrowc.lists at gmail.com
Tue Jan 20 20:47:57 CST 2009


On Tue, Jan 20, 2009 at 9:35 PM, Kameron Gasso <kgasso-lists at visp.net> wrote:

> Fortunately, the spoofed queries are 60 bytes and my REFUSED responses
> are only 59, so it's a terribly inefficient way to DoS someone.

bind has a 'blackhole' capabilty... which doesn't seem to reply with
anything (from my quick testing)

-chris




More information about the NANOG mailing list