AW: DDos counter measures

[vogt () hansenet com]

> Since our IntraNet solves all its DNS queries through internal caches 
> (mandatory bottleneck), we created windowsupdate.com & 
> windowsupdate.microsoft.com zones in this bottleneck DNS. These are 
> resolving to 127.0.0.1 with DNS wildcards.

Is it necessary to add windowsupdate.microsoft.com to this? So far, all
analysis indicated that it attacks windowsupdate.com, the old legacy
site.
Or did I miss something?


best regards / mit freundlichen Gruessen,

Tom Vogt
Hansenet Webfarm Security 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html