----- Original Message -----
From: "Len Conrad" <[EMAIL PROTECTED]>
Sent: Friday, October 04, 2002 6:39 PM

>
> If the DNS is publicly accessible and recursion is on, then it's vulnerable
> to being easily DOS'd with 1000's of spoofed queries, even from a single
> source.

I realise that, but the same applies to people not blocking ICMP from ping
attacks.

How many IP addresses still have ICMP open - even on some of the largest sites,
and on Win or nix machines?

I think we just have to weigh the pro's and cons and take a decision. I for one
have never heard of a Win2K DNS being attacked in that way, but I sure have
heard of pings of death and similar dos attacks.

Regards,

Adrian.



------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to