nanog mailing list archives

Re: Open Resolver Problems


From: "Dobbins, Roland" <rdobbins () arbor net>
Date: Tue, 26 Mar 2013 12:01:32 +0000


On Mar 26, 2013, at 6:50 PM, Jamie Bowden wrote:

let's suppose I just happen to have, or have access to, a botnet comprised of (tens of) millions of random hosts all 
over the internet, and I feel like destroying your DNS servers via DDoS;

DNS reflection/amplification attacks aren't intended as attacks against the DNS, per se; they're intended to crush 
any/all targeted servers and/or fill transit pipes.

Same for SNMP and ntp reflection attacks.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

          Luck is the residue of opportunity and design.

                       -- John Milton



Current thread: