[dns-wg] protect DNS servers from dns amplification attacks
Þórhallur Hálfdánarson thorhallur.halfdanarson at advania.is
Wed Aug 7 14:51:53 CEST 2013
Just bumped into this one while going through my feeds: http://www.isc.org/blogs/isc-adds-ddos-defense-module-to-bind-software/ Br, Tolli -----Original Message----- From: dns-wg-bounces at ripe.net [mailto:dns-wg-bounces at ripe.net] On Behalf Of Tony Finch Sent: 5. August 2013 11:40 To: Michael Hock Cc: dns-wg at ripe.net Subject: Re: [dns-wg] protect DNS servers from dns amplification attacks Michael Hock <hook1988 at gmail.com> wrote: > Is it already possible to protect DNS servers from spoofing attacks? Maybe > just by rate-limiting the requests, without breaking legit requests? See http://www.redbarn.org/dns/ratelimits Tony. -- f.anthony.n.finch <dot at dotat.at> http://dotat.at/ Forties, Cromarty: East, veering southeast, 4 or 5, occasionally 6 at first. Rough, becoming slight or moderate. Showers, rain at first. Moderate or good, occasionally poor at first.
[ dns-wg Archives ]