[dns-operations] happy september!

Roland Dobbins rdobbins at arbor.net
Tue Sep 6 14:30:07 UTC 2016


On 6 Sep 2016, at 21:15, Ralf Weber wrote:

> but if it is used as one tool in a toolbox that  has other tools like 
> rate limiting or domain based blocking it is a valuable tool.

One must do what one must do during an attack to maintain availability.  
I've cheerfully blocked ANY queries *and* responses, when needed, 
*during attacks*.

That's quite a different thing than recommending it as an always-on 
setting.

-----------------------------------
Roland Dobbins <rdobbins at arbor.net>



More information about the dns-operations mailing list