[162756] in North American Network Operators' Group
Re: Mitigating DNS amplification attacks
daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Wed May 1 06:53:40 2013
From: "Dobbins, Roland" <rdobbins@arbor.net>
To: NANOG list <nanog@nanog.org>
Date: Wed, 1 May 2013 10:53:27 +0000
In-Reply-To: <CAPWAtb+mPu9mpgAMhV1FkwMkW8-Hh+0ndhOc56Zdq=tGQ5LBsQ@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On May 1, 2013, at 5:42 PM, Jeff Wheeler wrote:
> The public list of smurf amplifiers turned out to be the only way to real=
ly deal with it.
It certainly helped; but the real solution was to get Cisco, et. al. to dis=
able directed broadcasts by default.
-----------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>
Luck is the residue of opportunity and design.
-- John Milton
