Re: Open Resolver Problems

["Dobbins, Roland" <rdobbins () arbor net>]

On Mar 26, 2013, at 7:07 PM, Patrick W. Gilmore wrote:

> To be more clear, the point of DNS reflection attacks is to amplify the amount of bandwidth the botnet can muster 
> (and perhaps hide the true source).

Yes, hence the 'amplification' part.

;>

More than hiding the actual sources, I think it's more about making it difficult (at first blush) for folks to seine 
out and filter the attack traffic from the normal 'background radiation' of legitimate traffic.

> And far too many other things. :(

Good point - game servers, etc.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

          Luck is the residue of opportunity and design.

                       -- John Milton