[dns-operations] if you're banning ANY queries, don't forget to ban SOA as well

Ray Bellis ray at isc.org
Sun Sep 4 15:01:42 UTC 2016


On 04/09/2016 05:07, Damian Menscher wrote:

> I understand that RRL can help in the case of amplification directly off
> authoritative servers, but I've never seen an attacker do that (or
> perhaps just didn't notice).

I have, plenty.

Ray





More information about the dns-operations mailing list