[nsp-sec] DNS amplification DDoS attack in progress via cam.ac.uk and ucam.org zones

[SURFcert - Peter]

Rodney,

Rodney Joffe wrote on 25-06-2012 21:25:

> Folks, as some of you know this attack profile has been ongoing for
> many months (perhaps even over a year) against many major DNS
> providers. And the level seems to be rising. We don't yet know
> who/what is behind it, but we just spun up a special working group
> (yes, it has become enough of a nuisance and potential threat that we
> created a specific working group) to begin to research it, and try
> and get it stopped.
> 
> If you are affected, and have an interest in working this, please
> feel free to reach out to the admins (Paul Vixie (paul at redbarn.org),
> Chris Morrow (morrowc at ops-netman.net), and Sean Leach
> (sleach at wiggum.com) who will bring you in/on.

Can I forward these addresses to the people handling this? Not
referencing nsp-sec of course.

-- 
Peter Peters                     /------\           SURFnet bv
SURFcert                         | SURF |           cert.surfnet.nl
cert at surfnet.nl                  \-----\ \-----\    Postbus 19035
PGP Key ID 0x5A52C966                   | CERT |    NL-3501 DA  Utrecht
+31 30 2305 305                         \------/    fax: +31 30 2305 329

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: OpenPGP digital signature
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20120628/5e75adba/attachment-0001.sig>