[dns-operations] solutions for DDoS mitigation of DNS

[Stephane Bortzmeyer]

On Thu, Apr 02, 2020 at 11:05:48AM +0100,
 Tony Finch <dot at dotat.at> wrote 
 a message of 30 lines which said:

> > ACLs in the server are not enough, you also need ingress filtering
> > on the borders of your network, to prevent packets claiming to be
> > from your network to get inside.
> 
> That kind of ingress filtering protects you against DDoSing
> yourself, which maybe the rest of the Internet isn't too bothered
> about :-)

I'm not sure I understand you.