[dns-operations] question for DNS being attacked

[pangj]

> DNS RRL looks for unnatural similarities in a <ip-src, dns-response>
> flow, and limits the rate accordingly. it will not stop a random-sourced
> attack nor a widely-reflected attack, but it has been shown to stop
> targetted attacks using a small number of reflectors.
>
> there is a technical note at<http://www.redbarn.org/dns/ratelimits>
> which describes the approach in detail.

Thank you. I will read it now.

-- 
Email/Jabber/Gtalk: pangj at riseup.net
Free DNS Hosting with www.DNSbed.com