Editing Denial-of-service attack (section)

===Blackholing and sinkholing===
With [[blackhole routing]], all the traffic to the attacked DNS or IP address is sent to a ''black hole'' (null interface or a non-existent server). To be more efficient and avoid affecting network connectivity, it can be managed by the ISP.<ref>{{cite journal |last1=Patrikakis |first1=C. |last2=Masikos |first2=M. |last3=Zouraraki |first3=O. |title=Distributed Denial of Service Attacks |journal=The Internet Protocol Journal |volume=7 |issue=4 |pages=13–35 |date=December 2004 |url=http://www.cisco.com/web/about/ac123/ac147/archived_issues/ipj_7-4/dos_attacks.html |access-date=2010-01-13 |archive-date=2015-12-27 |archive-url=https://web.archive.org/web/20151227060036/http://www.cisco.com/web/about/ac123/ac147/archived_issues/ipj_7-4/dos_attacks.html |url-status=dead }}</ref> A [[DNS sinkhole]] routes traffic to a valid IP address which analyzes traffic and rejects bad packets. Sinkholing may not be efficient for severe attacks.