[dns-operations] DNS deluge for x.p.ctrc.cc
geoincidents at nls.net
Wed Mar 1 19:44:38 UTC 2006
> Actually, the way to stop that is to place the filters on the router
> between the ISP and the client. Putting filters on every router isn't
> really necessary if you filter at the edge, instead of trying to do it
> somewhere in the middle. Most networks that I've seen, do the filtering
> there anyway.
If you filter at the edge, then all the client machines on your network
(which can be a lot if you are an ISP or decent sized business) are capable
of spoofing your dns servers as some remote IP address.
More information about the dns-operations