nanog mailing list archives

Re: large organization nameservers sending icmp packets to dns servers.


From: Stephane Bortzmeyer <bortzmeyer () nic fr>
Date: Thu, 9 Aug 2007 09:55:32 +0200


On Wed, Aug 08, 2007 at 03:20:56PM -0700,
 william(at)elan.net <william () elan net> wrote 
 a message of 23 lines which said:

How is that an "anti DoS" technique when you actually need to return
an answer via UDP in order to force next request via TCP?

Because there is no amplification: the UDP response packet can be very
small.


Current thread: