nanog mailing list archives
Are we really this helpless? (Re: isprime DOS in progress)
From: Seth Mattinen <sethm () rollernet us>
Date: Fri, 23 Jan 2009 18:05:43 -0800
Noel Butler wrote:
On Sat, 2009-01-24 at 07:21, Chris McDonald wrote:We [AS3491] null0'd the IP earlier. Rest-of-world encouraged to do the same :/Wrong approach, they are *innocent* in this as are the new targets. insert into your favourite acl: deny udp host 66.230.160.1 neq 53 any eq 53 deny udp host 66.230.128.15 neq 53 any eq 53 But it's much less work to add a filter on the name server as others have mentioned.
Having the world trying to keep up with ACL entries seems futile. Is there really nothing to be done about this? (Yes, I know, BCP38, but obviously the accomplice providers don't care.)
~Seth
Current thread:
- RE: isprime DOS in progress, (continued)
- RE: isprime DOS in progress Justin Krejci (Jan 21)
- Re: isprime DOS in progress, and Re: DNS Amplification attack? Dale Carstensen (Jan 21)
- Re: isprime DOS in progress Harald Koch (Jan 21)
- Re: isprime DOS in progress Bjørn Mork (Jan 22)
- Re: isprime DOS in progress Phil Rosenthal (Jan 23)
- RE: isprime DOS in progress Steven Lisson (Jan 23)
- Re: isprime DOS in progress Joe Abley (Jan 23)
- RE: isprime DOS in progress Luke Sheldrick (Jan 23)
- Re: isprime DOS in progress Chris McDonald (Jan 23)
- Re: isprime DOS in progress Noel Butler (Jan 23)
- Are we really this helpless? (Re: isprime DOS in progress) Seth Mattinen (Jan 23)
- Re: Are we really this helpless? (Re: isprime DOS in progress) Jeffrey Lyon (Jan 23)
- Re: Are we really this helpless? (Re: isprime DOS in progress) Gadi Evron (Jan 23)
- Re: Are we really this helpless? (Re: isprime DOS in progress) Seth Mattinen (Jan 23)
- Re: Are we really this helpless? (Re: isprime DOS in progress) Valdis . Kletnieks (Jan 23)
- Re: Are we really this helpless? (Re: isprime DOS in progress) Jamie A Lawrence (Jan 23)
- Re: Are we really this helpless? (Re: isprime DOS in progress) Christopher Morrow (Jan 23)
- Re: Are we really this helpless? (Re: isprime DOS in progress) Danny McPherson (Jan 23)
- Re: Are we really this helpless? (Re: isprime DOS in progress) David Conrad (Jan 23)
- Re: Are we really this helpless? (Re: isprime DOS in progress) Danny McPherson (Jan 23)
- Re: Are we really this helpless? (Re: isprime DOS in progress) Jack Bates (Jan 23)