|
|
|
|
|
by rocqua
2840 days ago
|
|
DNS (used to be?) is a great amplifier for DDOS attacks. Because the 'source' address is user supplied, and there are DNS responses that are much larger than the requests.
So you can use 1Mb/s of data to send DNS queries with your targets IP as the source address to get e.g. a 10Mb/s stream of data to your target. Maybe the rate-limiting is an attempt to subvert being used in this kind of DDOS. |
|