[Dshield] speedy!

Stephane Grobety security at admin.fulgan.com
Tue Mar 30 08:00:20 GMT 2004


e> Could anybody please tell me what generates www.speedy!.com because
e> I just faced a Dos by a customer generating thousands of requests
e> to this url which brought our ADSL router and the CACHE engine to
e> their knees. How can I go about fighting this back.

This URL doesn't and can't resolve: the "!" character isn't authorized
in the DNS system and cannot currently be converted using IDNA
(international DNS encoding).

www.speedy.com, however, does resolve: it's a french company that is
in the "quick car fix" business (tires, exhausts, etc.).

Do you have a capture of the faulty packets ?

Good luck,
Stephane





More information about the list mailing list