On Jan 1, 2014, at 7:27 PM, Gert Doering <[email protected]> wrote:
> Abusing authoritatives is not "the exception", and has not been for over a > year. It is 'the exception' in the context of my previous reply, which had to do with abuse of open recursors. Agree 100% it isn't rare; that wasn't what I meant, apologies for being unclear. Direct abuse of authoritative servers using spoofed ANY queries and other spoofed queries intended to generate large responses goes back many years, absolutely. But we still see lots of attacks utilizing open recursors; direct abuse of authoritative servers hasn't superseded or eliminated the use of open recursors, attacks leveraging open recursors take place every day, as you know. ----------------------------------------------------------------------- Roland Dobbins <[email protected]> // <http://www.arbornetworks.com> Luck is the residue of opportunity and design. -- John Milton
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
