Re: DDoS on the 16th - Fail if no DNS resolution?

[Laurent LEVIER <llevier () argosnet com>]

All,

Dont forget it is not said msblast will immediately start at Aug 16th 00:00 
infected machine time but:

quote (eEye)

Denial of Service:
Each infected host will begin to SYN flood windowsupdate.com (on port 80) 
starting on the 16th of the month in January through August, or on any day 
in September through December. Note that this behavior is independent of 
the current year, and can therefore persist indefinitely as long as 
instances of the worm remain active in the wild.

/quote

Laurent LEVIER
IT Systems & Networks Security Expert



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html