Re: [ga] USG root servers under DDOS attack

[eric@hi-tek.com]

I believe a careful review will reveal another one under progress.

Interesting indeed.   Who benefits from such things?

As for amateurs, I think you look at technique and not result.  Who benefits
from doing a poor job?

I believe that there are two convergence's that make this timing and limited
methodology timely and strategic.

e

Joe Baptista wrote:

> allan - i've continued to investigate this incident and i can tell you the
> attacks were by amatuers.  According to vixie it was an icmp based DDOS -
> now if I wanted to do any damage I would of initiated a UDP reflector
> attack against the dns operating on those root servers.
>
> i smell something fishy here paul - just in time for china.
>
> On Mon, 21 Oct 2002, Allan Liska wrote:
>
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: MD5
> >
> > Hello Joe,
> >
> > Monday, October 21, 2002, 7:12:08 PM, you wrote:
> >
> >
> > JB> I've been predicting this for years - along with many others.  Another
> > JB> good reason why we need multiple roots.
> >
> > What exactly would stop an attacker from launching the same attacks
> > against multiple roots?  Multiple roots would not have provided any
> > benefits against this attack.
> >
> > In addition, I would say this DDoS demonstrates that multiple roots
> > are unnecessary.  The vast majority of the Internet had no idea this
> > was happening as the root servers still responded to queries, albeit
> > slower than usual (but not a perceptible difference).  Given the scale
> > of the attack, I would say the root servers held up admirably.
> >
> >
> > allan
> > - --
> > Allan Liska
> > allan@allan.org
> > http://www.allan.org
> >
> > -----BEGIN PGP SIGNATURE-----
> > Version: 2.6
> >
> > iQCVAwUAPbSYXykg6TAvIBeFAQH+hAQAvFTUMsko+ndUbnJvf0tneUNAnjPYywfs
> > L9A75oikBJqO8J16kwbrCtFrrH6ZFHuAGCJp8y4c3obFW8l2HBKmaYhg5pMvzu4B
> > DkPvMjF4ylU8eY9eEvSzgIYoZIDzm79CAf4iewSFQo5zXAhKXjaTxUx93zd/ZeT1
> > l44QLGXgEio=
> > =ZKfx
> > -----END PGP SIGNATURE-----
> >
> >
> > --
> > This message was passed to you via the ga@dnso.org list.
> > Send mail to majordomo@dnso.org to unsubscribe
> > ("unsubscribe ga" in the body of the message).
> > Archives at http://www.dnso.org/archives.html
> >
>
> --
> This message was passed to you via the ga@dnso.org list.
> Send mail to majordomo@dnso.org to unsubscribe
> ("unsubscribe ga" in the body of the message).
> Archives at http://www.dnso.org/archives.html

--
This message was passed to you via the ga-full@dnso.org list.
Send mail to majordomo@dnso.org to unsubscribe
("unsubscribe ga-full" in the body of the message).
Archives at http://www.dnso.org/archives.html