Home page logo

nanog logo nanog mailing list archives

Re: isprime DOS in progress
From: Noel Butler <noel.butler () ausics net>
Date: Sat, 24 Jan 2009 11:50:24 +1000

On Sat, 2009-01-24 at 07:21, Chris McDonald wrote:

We [AS3491] null0'd the IP earlier.  Rest-of-world encouraged to do the same :/

Wrong approach, they are *innocent* in this as are the new targets.

insert into your favourite acl:
deny udp host neq 53 any eq 53
deny udp host neq 53 any eq 53

But it's much less work to add a filter on the name server as others
have mentioned.

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]