[outages] Trouble with Network Solutions DNS Servers

[Bill Woodcock]

      On Fri, 23 Jan 2009, Kurt VanderScheer wrote:
    > Network Solutions is reporting ongoing problems since yesterday with some of
    > their DNS servers.
    > http://forums.networksolutions.com/announcements-f4-dns-issues-possible-impa
    > ct-to-your-ecommerce-site-t3433.html
    > <http://forums.networksolutions.com/announcements-f4-dns-issues-possible-imp
    > act-to-your-ecommerce-site-t3433.html> 

This is the result of a large-scale UDP/53 DDoS.  My (unofficial) 
understanding is that they're being flooded with properly-formed DNS 
queries, indistinguishable from real traffic, which makes it very 
difficult to discern DDoS sources, since there's no reason to think that 
source addresses aren't forged.

                                -Bill