Home page logo

nanog logo nanog mailing list archives

Re: The impending DDoS storm
From: Dan Hollis <goemon () anime net>
Date: Wed, 13 Aug 2003 11:21:19 -0700 (PDT)

On Wed, 13 Aug 2003, Jason Frisvold wrote:
If the blaster cannot get a proper DNS response, it continues to
replicate via port 135... It then goes into a retry cycle and continues
to try to get a good DNS lookup.

has anyone tried tarpitting eg labrea to slow the worm?

[-] Omae no subete no kichi wa ore no mono da. [-]

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]