Re: [FD] DDos Attack To Drop The Internet

[Phil Ashby <Phil.Ashby@xxxxxxxxxx>]

This used to be a problem, 10+ years ago, since then there has been a lot of 
work done to protect larger DNS services (root servers in particular) against 
DDoS:

https://en.wikipedia.org/wiki/Distributed_denial-of-service_attacks_on_root_nameservers

P.

-----Original Message-----
From: Fulldisclosure [mailto:fulldisclosure-bounces@xxxxxxxxxxxx] On Behalf Of 
Jeffrey Roberts
Sent: 05 October 2015 16:40
To: fulldisclosure@xxxxxxxxxxxx
Subject: [FD] DDos Attack To Drop The Internet

If you were to have a botnet which were to flood random DNS queries for domains 
that did not exist to the list of DNS servers hosted on 
http://public-dns.tk/nameservers-all.txt then the root dns servers and the tld 
dns servers would be overwhelmed without any way to filter the packets, if they 
were to filter the packets of the DNS servers, they themselves would be turning 
off DNS, hence they can not do that... If the botnet only hits the DNS servers 
on the list a few times, filtering those packets would be insignificant. This 
attack should in essence turn off DNS for the world, hence, turning off the 
internet as the public knows it today.

--
- Jeff

_______________________________________________
Sent through the Full Disclosure mailing list 
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/
GB Group plc
Registered Address: The Foundation, Herons Way, Chester, CH4 9GB
Registered in England number: 2415211
VAT number: 539 7162 18


DISCLAIMER: This e-mail contains proprietary information some or all of which 
may be legally privileged. It is for the intended recipients only. 
If you are not an intended recipient you must not use, disclose, distribute, 
copy, print, or rely on this e-mail in any form or manner. 

Accordingly; GB Group plc disclaim all responsibility and accept no liability 
(including in negligence) for the consequences for any person 
acting, or refraining from acting, on such information prior to the receipt by 
those persons of subsequent written confirmation.

If you have received this E-mail message in error, please notify us immediately 
by telephone on 01244 657333. Please also destroy and 
delete the message from your computer. 

For further details about GBGroup please visit http://www.gbgplc.com


_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/