[dns-operations] First experiments with DNS dampening to fight amplification attacks

Shane Kerr shane at isc.org
Fri Oct 26 11:04:19 UTC 2012


Roland,

On Friday, 2012-10-26 01:48:44 +0000, 
"Dobbins, Roland" <rdobbins at arbor.net> wrote:
> 
> On Oct 26, 2012, at 8:33 AM, Mark Andrews wrote:
> 
> > We essentially have the infrastructure to do this today. 
> 
> Not all (not even most) network infrastructure is connected to or
> even has connectivity to the public Internet.

Yeah, that's not the infrastructure we care about, since that is not
spoofing source addresses on the public Internet.

--
Shane



More information about the dns-operations mailing list