Re: SYN floods - possible solution? (fwd)

[dvv () sprint net (Dima Volodin)]

alex () relcom EU net writes:
> [...]
> He can send
> DNS request with YOUR src address,
> [...]

Apart from the obvious sexism :-) of the message let me point out that
there are some other tricks one can play with DNS, e.g. throwing in
any addresses for some other's servers in additional records in your DNS
reponces. We are hit by this DNS/named deficiency _every freaking day_.

> Aleksei Roudnev, Network Operations Center, Relcom, Moscow

Dima
- - - - - - - - - - - - - - - - -