Quote:
Originally posted by DynaSpain
Partly true. Ping request are often used because they are small
packets which means a shitload of packets causing huge load to
anything that tries to filter packets. Large datagrams are useless
because they are too easy to filter out as filters only read the
headers of the packets being sent in order to determine if they
should get dropped or accepted.
Script Kiddies IRC botnets can be a hassle but they mostly use forged source addresses which makes it a little easier to take
proper action. They can still cause a lot of problems but it's not
as bad as real distinctive hosts with geniune source addresses.
Forged packets can be traced back to their original destination.
Routers and Firewalls have ways to determine if packets are
forged or spoofed which makes it easier to filter them out.
Non forged/spoofed packets cannot be filtered by labeling them
as forged which makes it a lot harder to properly filter them out.
DynaMite
|
I never realized bot hosts are forged. Unless they assume part of the IRC server host? I know when i used to go on irc, if you did a whois on me (on certain servers) my ip was masked with something intentional from the server.
I think this was done to prevent ddos attacks to indeviduals.
__________________
HEY!!
Unbeatable hosting! Customer service is top notch!
--> ISPrime <-- Do a search on any board, their reputation is rock solid .. for years!!