[dns-operations] Why would an MTA issue an ANY query instead of an MX query?
dot at dotat.at
Mon Jun 11 14:47:20 UTC 2012
Vernon Schryver <vjs at rhyolite.com> wrote:
> My hope and almost ambition for the code I've been working on is
> find a default set of parameters response rate limiting parameters
> to reduce the nuisance of open resolvers.
Do you expect the parameters to differ for reflected amplification attacks
on authoritative servers? (which is the case that I care about.)
Have you considered minimal truncated replies as an alternative response
to over-limit clients? The idea being to move legit queries from the
victims onto TCP.
f.anthony.n.finch <dot at dotat.at> http://dotat.at/
Portland: Variable 3 or 4, becoming northerly or northwesterly 4 or 5,
occasionally 6 in east. Slight or moderate. Occasional rain. Moderate or good,
More information about the dns-operations