North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Impending (mydoom) DOS attack

  • From: Mikael Abrahamsson
  • Date: Sat Jan 31 02:05:45 2004 
;; ANSWER SECTION:
www.sco.com.            60      IN      A       216.250.128.12

As far as I can see, someone has taken precation and lowered the TTL on 
www.sco.com to 60 seconds so any DOS attack towards www.sco.com can be 
hindered by them changing their DNS information. This wont stop any DoS in 
progress, or it might, I dont know if the worm will do repeated DNS 
resolves or only do it once and keep sending data to that IP until reboot.

-- 
Mikael Abrahamsson    email: [email protected]