Viktor Dukhovni <ietf-d...@dukhovni.org> wrote: > > refection of answers to forged source IPs is not available with TCP
Attackers can get a small amplification from SYN/ACK retries, and this is being used in the wild. https://www.darkreading.com/attacks-breaches/new-ddos-attacks-leverage-tcp-amplification-/d/d-id/1336339 Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ Trafalgar: Variable 3 or less in southeast, southwesterly 3 to 5 in northwest. Moderate, occasionally rough in north and slight in southeast. Showers. Good, occasionally moderate. _______________________________________________ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations
