[dns-operations] First experiments with DNS dampening to fight amplification attacks

paul vixie paul at redbarn.org
Fri Oct 26 04:19:14 UTC 2012


On 10/26/2012 3:33 AM, Dobbins, Roland wrote:
> On Oct 26, 2012, at 9:38 AM, P Vixie wrote:
>
>>  Let the default for new routers be s.a.v. and I don't expect much trouble.
> The problem is that the increase in helpdesk call volume and trouble-tickets will have a negative economic impact on the infrastructure vendors.
>
> Believe me, this has been a source of contentious debate within major network infrastructure vendors.  Like you, I wish it could be the default; but, absent some mechanism which doesn't cause problems in some non-isignificant fractions of deployment scenarios, it isn't going to happen.

this sounds like a new application of 'the chemical polluter business
model'.

paul



More information about the dns-operations mailing list