send out packets with fake source IP. the fake source IP is your attack target. servers / services respond with a larger packet back to the attack target. Its c

send out packets with fake source IP. the fake source IP is your attack target. servers / services respond with a larger packet back to the attack target. Its called DDoS amplification. you can prevent this on networks you own by implementing Unicast RPF https://en.wikipedia.org/wiki/Reverse-path_forwarding#Unicast_RPF https://en.wikipedia.org/wiki/Reverse-path_forwarding#Unicas...