[60512] in North American Network Operators' Group
Re: The impending DDoS storm
daemon@ATHENA.MIT.EDU (Dan Hollis)
Wed Aug 13 14:22:00 2003
Date: Wed, 13 Aug 2003 11:21:19 -0700 (PDT)
From: Dan Hollis <goemon@anime.net>
To: Jason Frisvold <friz@corp.ptd.net>
Cc: Lloyd Taylor <ltaylor@keynote.com>,
Jack Bates <jbates@brightok.net>, <nanog@merit.edu>
In-Reply-To: <1060796804.7453.88.camel@dhcp9-52.noc.corp.ptd.net>
Errors-To: owner-nanog-outgoing@merit.edu
On Wed, 13 Aug 2003, Jason Frisvold wrote:
> If the blaster cannot get a proper DNS response, it continues to
> replicate via port 135... It then goes into a retry cycle and continues
> to try to get a good DNS lookup.
has anyone tried tarpitting eg labrea to slow the worm?
-Dan
--
[-] Omae no subete no kichi wa ore no mono da. [-]
