[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Open Resolver Problems
- Subject: Open Resolver Problems
- From: marka at isc.org (Mark Andrews)
- Date: Fri, 29 Mar 2013 22:24:16 +1100
- In-reply-to: Your message of "Fri, 29 Mar 2013 16:44:19 +1300." <[email protected]>
- References: <[email protected]> <[email protected]> <CAEmG1=oXXwHObBcBaRTFTj9-uyq_dFfB4j63LAmKp8Y4hdT+Wg@mail.gmail.com> <CAL89Sg+XDKc=_6UWosAZ=wyPJb9tm2GaN0-vDk8Kyiji+vEUUQ@mail.gmail.com> <[email protected]>
In message <20130329034419.GA26823 at meh.net.nz>, Ben Aitchison writes:
> That said, a lot of these amplifications attacks use ANY requests, which
> normal clients don't. And those could be rate limited down without
> effecting normal traffic I'm sure.
>
> Ben.
And you need to learn that normal clients *do* issue type any
queries. Blocking any queries would be easy if normal clients
didn't issue any queries. You would have need controls added to
nameserver to block them if there wern't normal clients issuing any
queries.
Mark
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org