nanog mailing list archives

Re: The impending DDoS storm


From: Dan Hollis <goemon () anime net>
Date: Wed, 13 Aug 2003 11:21:19 -0700 (PDT)


On Wed, 13 Aug 2003, Jason Frisvold wrote:
If the blaster cannot get a proper DNS response, it continues to
replicate via port 135... It then goes into a retry cycle and continues
to try to get a good DNS lookup.

has anyone tried tarpitting eg labrea to slow the worm?

-Dan
-- 
[-] Omae no subete no kichi wa ore no mono da. [-]


Current thread: