[nsp-sec] TWC dns issues?

Florian Weimer fweimer at bfk.de
Thu Mar 5 03:44:57 EST 2009


* Jim Carhart:

> Looks like (and I'm taking responsibility on Time Warner Cables' part)
> TWC is propagating a intermittent DNS Amplification Attack without
> Recursion (Vaughn/Gadi) against plaync.com from TWC Los Angeles
> Divisional DNS servers.

Are you serving DNS errors to your clients, or an address which
rejects all connections immediately?  Returning a valid address which
does not answer should likely make the "attack" go away.

-- 
Florian Weimer                <fweimer at bfk.de>
BFK edv-consulting GmbH       http://www.bfk.de/
Kriegsstraße 100              tel: +49-721-96201-1
D-76133 Karlsruhe             fax: +49-721-96201-99



More information about the nsp-security mailing list