Just bumped into this one while going through my feeds: http://www.isc.org/blogs/isc-adds-ddos-defense-module-to-bind-software/ Br, Tolli -----Original Message----- From: dns-wg-bounces@ripe.net [mailto:dns-wg-bounces@ripe.net] On Behalf Of Tony Finch Sent: 5. August 2013 11:40 To: Michael Hock Cc: dns-wg@ripe.net Subject: Re: [dns-wg] protect DNS servers from dns amplification attacks Michael Hock <hook1988@gmail.com> wrote:
Is it already possible to protect DNS servers from spoofing attacks? Maybe just by rate-limiting the requests, without breaking legit requests?
See http://www.redbarn.org/dns/ratelimits Tony. -- f.anthony.n.finch <dot@dotat.at> http://dotat.at/ Forties, Cromarty: East, veering southeast, 4 or 5, occasionally 6 at first. Rough, becoming slight or moderate. Showers, rain at first. Moderate or good, occasionally poor at first.