News for hackers. Stuff that matters.

A comment on IP Spoofing. Parent comment

Re:IP Spoofing by fanf2 on Saturday October 08, 2016 @07:17AM (#12666524)
DNS servers have in fact been modified to make it much harder to use them in amplification attacks, by adding response rate limiting - see http://www.redbarn.org/dns/ratelimits
[ Parent | on HN ]
Re:IP Spoofing by hueving on Saturday October 08, 2016 @04:25PM (#12668578)
That does much less than you would think. Attackers just spread the packets out over more DNS servers and still get the same amplification factor.

See why trying to 'fix' this at the DNS level is stupid?

[ Parent | on HN ]