nanog mailing list archives

RE: Recent DNS attacks from China?

From: <Rob.Vercouteren () kpn com>
Date: Fri, 2 Dec 2011 16:40:52 +0100

Since it is spoofed traffic we block the "source", so not participating in flooding the real ip address.
The real issue is verify unicast reverse path not being implemented. So that the ip addresses cannot be spoofed!
(unless we are dealing with some major unknown vurlnerabilities in our infrastructure)
After a few days we will unblock again.


Regards,

Rob Vercouteren

Current thread:

Re: Recent DNS attacks from China? Ryan Rawdon (Dec 02)
- Re: Recent DNS attacks from China? Leland Vandervort (Dec 02)
  - Re: Recent DNS attacks from China? Joel Maslak (Dec 02)
    - Re: Recent DNS attacks from China? Chris Adams (Dec 02)
    - RE: Recent DNS attacks from China? Rob.Vercouteren (Dec 02)