Re: ORP

[bmanning () vacation karoshi com]

On Tue, Mar 26, 2013 at 08:07:22AM -0400, Patrick W. Gilmore wrote:
> On Mar 26, 2013, at 08:01 , "Dobbins, Roland" <rdobbins () arbor net> wrote:
> > On Mar 26, 2013, at 6:50 PM, Jamie Bowden wrote:
> >
> > > let's suppose I just happen to have, or have access to, a botnet comprised of (tens of) millions of random hosts 
> > > all over the internet, and I feel like destroying your DNS servers via DDoS;
> >
> > DNS reflection/amplification attacks aren't intended as attacks against the DNS, per se; they're intended to crush 
> > any/all targeted servers and/or fill transit pipes.
>
> To be more clear, the point of DNS reflection attacks is to amplify the amount of bandwidth the botnet can muster 
> (and perhaps hide the true source).
>
> If you have 10s of millions of bots, you don't need to amplify. You can crush any single IP address on the 'Net.
>
>
> TTFN,
> patrick


        "You are the Brut Squad!"