Re: really nasty attacks

2012-09-27 Thread Cutler James R
On Sep 27, 2012, at 12:12 PM, Patrick W. Gilmore wrote: > > On Sep 27, 2012, at 11:34 , Stephane Bortzmeyer wrote: >> On Thu, Sep 27, 2012 at 08:55:58AM -0600, Miguel Mata >> wrote >> a message of 30 lines which said: >> >>> Guys, >> >> No gals on NANOG? > > Many. Although in fairness, so

Re: really nasty attacks

2012-09-27 Thread Stephane Bortzmeyer
On Thu, Sep 27, 2012 at 12:12:50PM -0400, Patrick W. Gilmore wrote a message of 32 lines which said: > I do not know of any name servers that reply to queries with UDP > packets filled with only the letter X. The DNS Headers alone > require more than the letter "X". Yes, you're right but I'm

Re: really nasty attacks

2012-09-27 Thread Jim Mercer
On Thu, Sep 27, 2012 at 12:12:50PM -0400, Patrick W. Gilmore wrote: > On Sep 27, 2012, at 11:34 , Stephane Bortzmeyer wrote: > > On Thu, Sep 27, 2012 at 08:55:58AM -0600, Miguel Mata > > wrote > > No gals on NANOG? > > Many. Although in fairness, some people use "guys" in a gender-neutral >

Re: really nasty attacks

2012-09-27 Thread Patrick W. Gilmore
On Sep 27, 2012, at 11:34 , Stephane Bortzmeyer wrote: > On Thu, Sep 27, 2012 at 08:55:58AM -0600, Miguel Mata > wrote > a message of 30 lines which said: > >> Guys, > > No gals on NANOG? Many. Although in fairness, some people use "guys" in a gender-neutral manner. >> The attacks comes f

Re: really nasty attacks

2012-09-27 Thread Stephane Bortzmeyer
On Thu, Sep 27, 2012 at 08:55:58AM -0600, Miguel Mata wrote a message of 30 lines which said: > Guys, No gals on NANOG? > The attacks comes from various sites from the other side of the pond > (46.165.197.xx, 213.152.180.yy). How can you be sure? With UDP, you have zero guarantee on the so

Re: really nasty attacks

2012-09-27 Thread Jared Mauch
On Sep 27, 2012, at 10:55 AM, Miguel Mata wrote: > Guys, > > on recent days I've seen an UDP attack a couple of times. The attack is > fairly simple, a full > load of UDP packets filled with "X". The attacks comes from various sites > from the other side > of the pond (46.165.197.xx, 213.152

really nasty attacks

2012-09-27 Thread Miguel Mata
Guys, on recent days I've seen an UDP attack a couple of times. The attack is fairly simple, a full load of UDP packets filled with "X". The attacks comes from various sites from the other side of the pond (46.165.197.xx, 213.152.180.yy). Has anyone seen this kind of attack? Basically, the at