[dns-wg] protect DNS servers from dns amplification attacks

Wed Aug 7 14:51:53 CEST 2013

Just bumped into this one while going through my feeds:
http://www.isc.org/blogs/isc-adds-ddos-defense-module-to-bind-software/

Br,
Tolli

-----Original Message-----
From: dns-wg-bounces at ripe.net [mailto:dns-wg-bounces at ripe.net] On Behalf Of Tony Finch
Sent: 5. August 2013 11:40
To: Michael Hock
Cc: dns-wg at ripe.net
Subject: Re: [dns-wg] protect DNS servers from dns amplification attacks

Michael Hock <hook1988 at gmail.com> wrote:

> Is it already possible to protect DNS servers from spoofing attacks? Maybe
> just by rate-limiting the requests, without breaking legit requests?

See http://www.redbarn.org/dns/ratelimits

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
Forties, Cromarty: East, veering southeast, 4 or 5, occasionally 6 at first.
Rough, becoming slight or moderate. Showers, rain at first. Moderate or good,
occasionally poor at first.