[57066] in North American Network Operators' Group
DNS dDos Attack!
daemon@ATHENA.MIT.EDU (Dan Armstrong)
Fri Mar 28 09:35:27 2003
Date: Fri, 28 Mar 2003 09:20:20 -0500
From: Dan Armstrong <dan@beanfield.com>
To: nanog@merit.edu
Errors-To: owner-nanog-outgoing@merit.edu
I am sorry if this has come up before, but it seems that one of our name
servers is under some sort of dDos attack. It seems to be receiving
millions of queries form spoofed IPs, and it is spending all of it's
time sending back icmp unreachables.
It is running bind 4.31 under BSD 4.62STABLE
Help!
Thanks,
Dan.
