[dns-operations] "Poorly configured DNSSEC servers at root of DDoS attacks"

Roland Dobbins rdobbins at arbor.net
Wed Sep 7 12:31:23 UTC 2016

On 7 Sep 2016, at 18:44, Paul Vixie wrote:

> treat ANY as strategically valuable attack-signature that is presently 
> useful in traceback activities, and must be preserved for that purpose

Can confirm - ANY and lots of TXT responses are a very strong, useful 
signal when it comes to sorting the wheat from the chaff on the 
reflector/amplifier ---> target leg of DNS reflection/amplification 

Roland Dobbins <rdobbins at arbor.net>

More information about the dns-operations mailing list