Attack on domain name servers fails

NEWS

An attempt to cripple the computers that serve as the address books for the Internet failed on Monday. The so-called distributed denial-of-service attack leveled a barrage of data at the 13 domain-name service root servers beginning around 1 pm PDT on Monday and apparently is ongoing, according to Internet performance measurement company Matrix NetSystems. Traffic from several Internet service providers have been slightly delayed, but because the domain name system is spread out and because the 13 root servers are the last resort for address searches, the attack had almost no effect on the Internet itself. "There was never an end user that said there was a problem," said Paul Vixie, chairman of the Internet Software Consortium, a group that supports the open-source software on which many domain name servers run. The group also administers one of the 13 computers -- specifically, the "F" server -- that routinely matches Internet addresses. Like the telephone book, domain name servers match a name with a number. They also are layered like a virtual onion, so that a user who wants to go to specific address, such as "cnet.com", will first attempt to get the information from a local server. If the domain is not found, then the request gets bumped up to a domain name server for the top-level domain, such as ".com". Requests should only rarely consult the root servers. Most requests that the ISC's "F" server sees are from poorly designed networks that don't cache the previous answers for information, Vixie said. "We answer a request and then two milliseconds later get another request from the same user for the same domain," he said. While Vixie took issue with reports that the attack had been the "largest ever", he did say that aspects of the data flood made it unusual. "There have been (previous) attacks against the root domain servers -- yes," he said. "But it is rare to have attacks against all 13 at the same time." The Internet Software Consortium's "F" server responds to more than 270 million domain-name service queries each day, according to its site. The 13 domain-name service root servers are designated "A" through "M". The most affected servers, according to Internet performance firm Matrix NetSystems, were the "A" and "J" servers owned by VeriSign Global Registry Services in Herndon, Virginia, the "G" server owned by the US Department of Defense Network Information Center in Vienna, Virginia, the "H" server at the US Army Research Lab Aberdeen, Maryland, the "I" server located in Stockholm, the "K" server located in London and the "M" server in Tokyo. Still, the results were not severe. According to Matrix NetSystems, the peak of the attack saw the average reachability for the entire DNS network dropped only to 94 percent from its normal levels near 100 percent. About 4,000 denial-of-service attacks hit the Internet in the average week, according to data collected by the Cooperative Association for Internet Data Analysis. Many of those are aimed at domain name servers. Attacks that broadly affect the Internet are rare. In April 1997, a misconfigured router advertised itself to the Internet as the quickest gateway to every other server and caused a ripple that affected communications for several hours.

For all security-related news, including updates on the latest viruses, hacking exploits and patches, check out ZDNet UK's Security News Section. Have your say instantly, and see what others have said. Go to the Security forum. Let the editors know what you think in the Mailroom.

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your ZDNet UK account below

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Community FAQ

ZDNet UK Live

The thing that has been puzzling me for quite a while is how Anonymous can remain anonymous whilst not only being active on the Internet but also...

11 hours ago by Moley on Anonymous activists release PCAnywhere source code

If what Semantec is saying is rue, that is even worse and shows a complete disregard for thier users. If what Anonymous claims is true and the...

15 hours ago by Don Dilly via Facebook on Anonymous activists release PCAnywhere source code

Didn't seem particularly biased to me either. Oh though you might have mentioned some other competitors with free search and email services...

18 hours ago by MattChurchy on Time for an evil umpire: Google, Microsoft & privacy

James - exactly as much as anyone paid you for your comment; I don't feel that I need to say that I'm independant and unbiased, but just for you...

19 hours ago by Simon Bisson and Mary Branscombe on Time for an evil umpire: Google, Microsoft & privacy

Once they realise symantec are willing to pay real money, they will simply keep extorting, unless of course symantec/authorities can use the...

23 hours ago by Carl White via Facebook on Symantec offered hackers $50k in source code sting

You can find more information on BS 8878 by Jonathan Hassell its lead-author at http://www.hassellinclusion.com/bs8878/ The page includes a...

1 day ago by Jonathan Hassell on BSI publishes first British web accessibility standard

Thanks for this list. Now I know, what to include on my system to make it more functional.

1 day ago by servermanagement on Ten flawed products that derail productivity

What if it's a 4 car household? The point is, more bandwidth = more things you can do simultaneously, like streaming HD video in one room of the...

1 day ago by 1000092626 on Virgin Media beats 100Mbps schedule, hikes prices

No point whatsoever increasing broadband download speed. unless ever server on the net has access to massively up rated throughput. The worlds...

1 day ago by Gary Burton via Facebook on Virgin Media beats 100Mbps schedule, hikes prices

They're also increasing their TV package prices, whether to help fund this or not.

1 day ago by Random_Error on Virgin Media beats 100Mbps schedule, hikes prices

How can you set it up wrong to intermittently connect? Should I be asking for more pay? Outlook/Exchange is a breeze.

2 days ago by Techs UK on Ten flawed products that derail productivity

And how much did Microsoft pay you for that article?

2 days ago by JamesCheese on Time for an evil umpire: Google, Microsoft & privacy

"But how many times have you seen someone make a video call from a tablet?" I do myself a lot. "How often have you seen someone hook up a tablet...

2 days ago by JamesCheese on Apple and Amazon's tablet rivals don't get it

I have to disagree with this article. Maybe there is a cultural difference between the US and UK, or maybe your network of friends is less...

2 days ago by k0tcs3 on Apple and Amazon's tablet rivals don't get it

My thoughts are that there's some space for change in the business world for tablets as destop replacements. I'd contend that the tablet has a...

2 days ago by filthylooker on Apple and Amazon's tablet rivals don't get it

Adobe did not dropped AIR development. It was Flex.

2 days ago by emrahatilkan on Flash 11 and AIR 3 get a release date

Company called Synergix ( www.synergix.com ) has a fix for the offline folders issue experienced by Win 7 users. And you can check out...

2 days ago by dd2 on VPNs, offline files and the simple Windows 7 fix; sometimes

I think all your above points are increasingly more invalid. The android ecosystem is open and evolving and maturing day by day. developers are...

2 days ago by Neil Lawther via Facebook on Apple and Amazon's tablet rivals don't get it

That really is what the European Commission is telling me. To give a precise quote: if a member state turns down the agreement, "ACTA will stay a...

2 days ago by David Meyer on ACTA's EU future in doubt after Polish pause

Apple devices are back online in German, take the down, no put them back...

2 days ago by MyProffs Proffs via Facebook on German iPhone, iPad sales temporarily banned

Featured white papers

Latest jobs

Hardware Lab Technician

Hardware Lab Technician - Hampshire - Contract Key Skills: Hardware, Commercial Electronics, RF, MS...

Apply now

Oracle APEX Teamleader - Secure Projects

We are looking for an Oracle APEX Team Leader. We have projects based in Reading and Gloucester. ...

Apply now

Attack on domain name servers fails

Daily Newsletters

Topics

Related stories

Hackers send Sendmail a message

Heart of England NHS begins massive digitisation plan

Hard-drive woes hit PC shipments in fourth quarter

Post your comment

ZDNet UK Live

Latest in IT Strategy

Heart of England NHS begins massive digitisation plan

Hard-drive woes hit PC shipments in fourth quarter

Featured white papers

Latest jobs

Business Analyst - Pricing - Platforms - Electronic Trading

Hardware Lab Technician

Oracle APEX Teamleader - Secure Projects

Inside ZDNet UK

Nicira reveals network virtualisation details

£1.2m for Durham Uni's graphene fab spin out

D-Link ShareCenter Pro 1100

Webcast - Managing Mobility and Network Expansion

Ten factors that make Ubuntu 11.10 a hit

Toshiba Portégé Z830-10P Review

BT's archive: Pictures from the vault

News & Analysis

Reviews

Blogs

Resources

About Us

Member Services

Special Features

Advertising Features

ZDNet UK / News and Analysis / Business of IT / IT Strategy

Attack on domain name servers fails

Daily Newsletters

Topics

Related stories

Post your comment

Get ZDNet UK's daily newsletter

Enter your email address to sign up

ZDNet UK Live

Latest in IT Strategy

Featured white papers

Latest jobs

Inside ZDNet UK

Resources

About Us

Member Services

Special Features

Advertising Features