[dns-operations] Defending against DNS reflection amplification attacks
fergdawgster at gmail.com
Sat Feb 23 03:43:03 UTC 2013
On Fri, Feb 22, 2013 at 7:38 PM, Randy Bush <randy at psg.com> wrote:
> one urban definition of insanity is repeating the same thing expecting
> different results.
> i do not disagree with bcp38. i just don't think repeating that anyone
> who does not deploy it is an anti-internet asshole is going to get any
> more significent deployment. that approach has been failing for many
I don't think I said anything even closely resembling that.
I did said that we (community) are not doing a proper job of promoting
proper behavior (and configuration) on the Internet.
And it's not all about BCP38 either. There are tens of millions of
open DNS recursive resolvers out there...
"Fergie", a.k.a. Paul Ferguson
More information about the dns-operations