North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: The impending DDoS storm

  • From: Dan Hollis
  • Date: Wed Aug 13 14:23:20 2003 
On Wed, 13 Aug 2003, Jason Frisvold wrote:
> If the blaster cannot get a proper DNS response, it continues to
> replicate via port 135... It then goes into a retry cycle and continues
> to try to get a good DNS lookup.

has anyone tried tarpitting eg labrea to slow the worm?

-Dan
-- 
[-] Omae no subete no kichi wa ore no mono da. [-]