Mitigating DNS amplification attacks

Dobbins, Roland rdobbins at arbor.net
Wed May 1 10:53:27 UTC 2013


On May 1, 2013, at 5:42 PM, Jeff Wheeler wrote:

> The public list of smurf amplifiers turned out to be the only way to really deal with it.

It certainly helped; but the real solution was to get Cisco, et. al. to disable directed broadcasts by default.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton




More information about the NANOG mailing list