nanog mailing list archives

Re: Mitigating DNS amplification attacks


From: "Dobbins, Roland" <rdobbins () arbor net>
Date: Wed, 1 May 2013 10:53:27 +0000


On May 1, 2013, at 5:42 PM, Jeff Wheeler wrote:

The public list of smurf amplifiers turned out to be the only way to really deal with it.

It certainly helped; but the real solution was to get Cisco, et. al. to disable directed broadcasts by default.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

          Luck is the residue of opportunity and design.

                       -- John Milton



Current thread: