North American Network Operators Group|
Date Prev | Date Next |
Date Index |
Thread Index |
Author Index |
Re: DDos syn attack
- From: Chris Wedgwood
- Date: Mon Dec 30 13:55:20 2002
On Mon, Dec 30, 2002 at 08:09:17AM -0800, Randy Bush wrote:
> actually, a bunch of research now shows that low ttls on A RRs (that
> are not the A RRs of NS RRs) has little effect.
maybe this could help find the attacking nwtwork? assuming people are
using local DNS servers?
under attack you could sporadically 'lie' about the result... and log
to whom you lied to... all the time looking for changes in the DDoS
a fair amount work perhaps...