nanog mailing list archives
Re: The impending DDoS storm
From: Dan Hollis <goemon () anime net>
Date: Wed, 13 Aug 2003 11:21:19 -0700 (PDT)
On Wed, 13 Aug 2003, Jason Frisvold wrote:
If the blaster cannot get a proper DNS response, it continues to replicate via port 135... It then goes into a retry cycle and continues to try to get a good DNS lookup.
has anyone tried tarpitting eg labrea to slow the worm? -Dan -- [-] Omae no subete no kichi wa ore no mono da. [-]
Current thread:
- The impending DDoS storm Jason Frisvold (Aug 13)
- Re: The impending DDoS storm Stephen J. Wilcox (Aug 13)
- Re: The impending DDoS storm Randy Bush (Aug 13)
- <Possible follow-ups>
- RE: The impending DDoS storm Jason Frisvold (Aug 13)
- RE: The impending DDoS storm Jason Frisvold (Aug 13)
- Re: The impending DDoS storm Jack Bates (Aug 13)
- Re: The impending DDoS storm Lloyd Taylor (Aug 13)
- Re: The impending DDoS storm Jason Frisvold (Aug 13)
- Re: The impending DDoS storm Dan Hollis (Aug 13)
- Re: The impending DDoS storm Aaron Hopkins (Aug 13)
- Re: The impending DDoS storm Jeff Kell (Aug 14)
- Re: The impending DDoS storm Jack Bates (Aug 13)
- Re: The impending DDoS storm Jack Bates (Aug 13)
- Re: The impending DDoS storm Mark Vallar (Aug 13)
- RE: The impending DDoS storm Christopher Chin (Aug 14)
- RE: The impending DDoS storm Kevin Houle (Aug 14)
- Re: The impending DDoS storm Michael Painter (Aug 14)