Full Disclosure mailing list archives
Re: DDos Attack To Drop The Internet
From: Phil Ashby <Phil.Ashby () gbgplc com>
Date: Tue, 6 Oct 2015 11:17:07 +0000
This used to be a problem, 10+ years ago, since then there has been a lot of work done to protect larger DNS services (root servers in particular) against DDoS: https://en.wikipedia.org/wiki/Distributed_denial-of-service_attacks_on_root_nameservers P. -----Original Message----- From: Fulldisclosure [mailto:fulldisclosure-bounces () seclists org] On Behalf Of Jeffrey Roberts Sent: 05 October 2015 16:40 To: fulldisclosure () seclists org Subject: [FD] DDos Attack To Drop The Internet If you were to have a botnet which were to flood random DNS queries for domains that did not exist to the list of DNS servers hosted on http://public-dns.tk/nameservers-all.txt then the root dns servers and the tld dns servers would be overwhelmed without any way to filter the packets, if they were to filter the packets of the DNS servers, they themselves would be turning off DNS, hence they can not do that... If the botnet only hits the DNS servers on the list a few times, filtering those packets would be insignificant. This attack should in essence turn off DNS for the world, hence, turning off the internet as the public knows it today. -- - Jeff _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/ GB Group plc Registered Address: The Foundation, Herons Way, Chester, CH4 9GB Registered in England number: 2415211 VAT number: 539 7162 18 DISCLAIMER: This e-mail contains proprietary information some or all of which may be legally privileged. It is for the intended recipients only. If you are not an intended recipient you must not use, disclose, distribute, copy, print, or rely on this e-mail in any form or manner. Accordingly; GB Group plc disclaim all responsibility and accept no liability (including in negligence) for the consequences for any person acting, or refraining from acting, on such information prior to the receipt by those persons of subsequent written confirmation. If you have received this E-mail message in error, please notify us immediately by telephone on 01244 657333. Please also destroy and delete the message from your computer. For further details about GBGroup please visit http://www.gbgplc.com _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
Current thread:
- DDos Attack To Drop The Internet Jeffrey Roberts (Oct 05)
- Re: DDos Attack To Drop The Internet Phil Ashby (Oct 08)
- Re: DDos Attack To Drop The Internet James Hodgkinson (Oct 08)