[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Recent DNS attacks from China?
- Subject: Recent DNS attacks from China?
- From: Rob.Vercouteren at kpn.com (Rob.Vercouteren at kpn.com)
- Date: Fri, 2 Dec 2011 16:40:52 +0100
- In-reply-to: <CADb+6TCQ3mzP=LEzXOsccRFUhKhbzehRBJrEmv+oocFJOHexEQ@mail.gmail.com>
- References: <[email protected]> <[email protected]> <CACB24MstXHDXq9LtfUpcanxV4SYKk7ke-aiWTrggHE5KrO1VPg@mail.gmail.com> <[email protected]> <[email protected]> <F3318834F1F89D46857972DD4B411D7005274280E8@exchange> <[email protected]> <[email protected]> <CADb+6TCQ3mzP=LEzXOsccRFUhKhbzehRBJrEmv+oocFJOHexEQ@mail.gmail.com>
Since it is spoofed traffic we block the "source", so not participating in flooding the real ip address.
The real issue is verify unicast reverse path not being implemented. So that the ip addresses cannot be spoofed!
(unless we are dealing with some major unknown vurlnerabilities in our infrastructure)
After a few days we will unblock again.
Regards,
Rob Vercouteren