How to Launch a 65Gbps DDoS, and How to Stop One
Who are these irresponsible network operators that allow spoofed source addresses out of their network?  The only way to make a reflection attack like this work is to make the responses go back to the victim.  For that to happen, it has to look like they generated the request.<p>Remember smurf?  Spoof-ping a broadcast address for a multiplication effect.  It's from 1997 or so.  15 years later and we're still living with that kind of problem.<p><a href="http://en.wikipedia.org/wiki/Smurf_attack" rel="nofollow">http://en.wikipedia.org/wiki/Smurf_attack</a>