Re: [dns-operations] annoying DDoS attack on ns0.rfc1035.com

Mon, 11 Jun 2012 01:06:15 -0700 

> > What I don't understand is that the source adresses are mostly out
> > of dynamic address pools from broadband ISP around the world.
> > So the victims are residentinal users?
> 
> No, most likely the residential users have CPEs with DNS proxies which
> are open to queries from the WAN side. Thus the attack is typically:
> spoofed source -> CPE -> name server -> CPE -> DoS of spooofed source
Oh, thanks. That's the missing link. 
_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs

Reply via email to