[dns-operations] Software that refuses an answer by QTYPE if it comes over plain UDP?
dot at dotat.at
Tue Mar 15 15:10:34 UTC 2016
Doug Barton <dougb at dougbarton.email> wrote:
> Are there any name servers in play today that will only answer for a certain
> QTYPE if the query comes via either TCP, or UDP with cookies?
Not a direct answer, but your question made me think about
and I soon realised that the behaviour you imply will not be helpful in
some situations. In particular, if you are getting QTYPE=ANY attack
traffic from a lot of legitimate resolvers (that implement cookies and
TCP) because clients of those resolvers are participating in an attack,
you still want to minimize your answers. http://fanf.livejournal.com/140566.html
This is just by way of a warning; I don't intend to make any suggestions
f.anthony.n.finch <dot at dotat.at> http://dotat.at/
Tyne, Dogger: Northeast veering east 3 or 4. Smooth or slight. Fog patches.
Moderate or good, occasionally very poor.
More information about the dns-operations