discuss AT lists.opennicproject.org

Subject: Discuss mailing list

List archive

Re: [opennic-discuss] DoS amp attack / Top20

From: "Alex M (Coyo)" <coyo AT darkdna.net>
To: discuss AT lists.opennicproject.org
Subject: Re: [opennic-discuss] DoS amp attack / Top20
Date: Mon, 29 Apr 2013 18:25:31 -0500

On 04/29/2013 04:37 PM, Guillaume Parent wrote:

The tier 2 security page shows how to trivially defeat these attacks through netfilter. It is available on the wiki.

The target is the source IP address, not isc.org.

are these source ip addresses related to each other in any way?

in other words, what does rdns say about these source ip addresses?

do they make sense as an attack target?

[opennic-discuss] DoS amp attack / Top20, Uwe (ML) Kiewel, 04/29/2013
- Re: [opennic-discuss] DoS amp attack / Top20, Jeff Taylor, 04/29/2013
  - Re: [opennic-discuss] DoS amp attack / Top20, kennytaylor, 04/29/2013
    - Re: [opennic-discuss] DoS amp attack / Top20, Alex M (Coyo), 04/29/2013
      - Re: [opennic-discuss] DoS amp attack / Top20, mike, 04/29/2013
        
        Re: [opennic-discuss] DoS amp attack / Top20, Alex M (Coyo), 04/29/2013
        
        Re: [opennic-discuss] DoS amp attack / Top20, Guillaume Parent, 04/29/2013
        
        Re: [opennic-discuss] DoS amp attack / Top20, mike, 04/29/2013
        Re: [opennic-discuss] DoS amp attack / Top20, Guillaume Parent, 04/29/2013
        
        Re: [opennic-discuss] DoS amp attack / Top20, Alex M (Coyo), 04/29/2013
        Re: [opennic-discuss] DoS amp attack / Top20, Jeff Taylor, 04/29/2013
        
        Re: [opennic-discuss] DoS amp attack / Top20, Bersl, 04/29/2013