2 ms·
Until more orgs implement BCP 38, it only takes a handful of servers with an open resolver to multiply the attackers bandwidth by a factor of 30 or more. UDP do
by gnopgnip 12y ago
Until more orgs implement BCP 38, it only takes a handful of servers with an open resolver to multiply the attackers bandwidth by a factor of 30 or more. UDP does not verify the source IP is the sender. Most of the internet will drop spoofed packets already, but there are still enough netblocks passing spoofed traffic, and vulnerable DNS servers for this to be a concern.