[98464] in North American Network Operators' Group
Re: large organization nameservers sending icmp packets to dns servers.
daemon@ATHENA.MIT.EDU (Stephane Bortzmeyer)
Thu Aug 9 03:56:29 2007
Date: Thu, 9 Aug 2007 09:55:32 +0200
From: Stephane Bortzmeyer <bortzmeyer@nic.fr>
To: "william(at)elan.net" <william@elan.net>
Cc: nanog@nanog.org
In-Reply-To: <Pine.LNX.4.62.0708081516490.25471@sokol.elan.net>
Errors-To: owner-nanog@merit.edu
On Wed, Aug 08, 2007 at 03:20:56PM -0700,
william(at)elan.net <william@elan.net> wrote
a message of 23 lines which said:
> How is that an "anti DoS" technique when you actually need to return
> an answer via UDP in order to force next request via TCP?
Because there is no amplification: the UDP response packet can be very
small.
