[dns-operations] Limiting DNSSEC-based amplification attacks (Was: Weird TXT record

[Dobbins, Roland]

On Jun 22, 2011, at 4:06 AM, Simon Munton wrote:

> iptables --limit or --hashlimit ?


iptables in front of any server, especially a DNS server, is a self-DoS waiting to happen.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

		The basis of optimism is sheer terror.

			  -- Oscar Wilde