[dns-wg] New on RIPE Labs: Securing Network Infrastructure for DNS Servers

Tue Jun 28 16:01:17 CEST 2016

It talks about rate limiting, which seems to me is a bit hard to do in a stateless way :-D

> On Jun 28, 2016, at 10:59 AM, Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote:
> 
> On Tue, Jun 28, 2016 at 10:46:17AM -0300,
> Carlos M. Martinez <carlosm3011 at gmail.com> wrote 
> a message of 31 lines which said:
> 
>> I’m sure there are plenty of people that will disagree with me, but,
>> IMO, you should never put stateful devices in front of a DNS
>> server.
> 
> I fully agree but, precisely, this article use stateless filtering.
>