Re: [ga] USG root servers under DDOS attack

[Joe Baptista <baptista@dot-god.com>]

allan - i've continued to investigate this incident and i can tell you the
attacks were by amatuers.  According to vixie it was an icmp based DDOS -
now if I wanted to do any damage I would of initiated a UDP reflector
attack against the dns operating on those root servers.

i smell something fishy here paul - just in time for china.

On Mon, 21 Oct 2002, Allan Liska wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: MD5
>
> Hello Joe,
>
> Monday, October 21, 2002, 7:12:08 PM, you wrote:
>
>
> JB> I've been predicting this for years - along with many others.  Another
> JB> good reason why we need multiple roots.
>
> What exactly would stop an attacker from launching the same attacks
> against multiple roots?  Multiple roots would not have provided any
> benefits against this attack.
>
> In addition, I would say this DDoS demonstrates that multiple roots
> are unnecessary.  The vast majority of the Internet had no idea this
> was happening as the root servers still responded to queries, albeit
> slower than usual (but not a perceptible difference).  Given the scale
> of the attack, I would say the root servers held up admirably.
>
>
> allan
> - --
> Allan Liska
> allan@allan.org
> http://www.allan.org
>
> -----BEGIN PGP SIGNATURE-----
> Version: 2.6
>
> iQCVAwUAPbSYXykg6TAvIBeFAQH+hAQAvFTUMsko+ndUbnJvf0tneUNAnjPYywfs
> L9A75oikBJqO8J16kwbrCtFrrH6ZFHuAGCJp8y4c3obFW8l2HBKmaYhg5pMvzu4B
> DkPvMjF4ylU8eY9eEvSzgIYoZIDzm79CAf4iewSFQo5zXAhKXjaTxUx93zd/ZeT1
> l44QLGXgEio=
> =ZKfx
> -----END PGP SIGNATURE-----
>
>
> --
> This message was passed to you via the ga@dnso.org list.
> Send mail to majordomo@dnso.org to unsubscribe
> ("unsubscribe ga" in the body of the message).
> Archives at http://www.dnso.org/archives.html
>

--
This message was passed to you via the ga-full@dnso.org list.
Send mail to majordomo@dnso.org to unsubscribe
("unsubscribe ga-full" in the body of the message).
Archives at http://www.dnso.org/archives.html