nanog mailing list archives
Re: DNS deluge for x.p.ctrc.cc
From: Nicholas Suan <nsuan () nonexiste net>
Date: Sat, 25 Feb 2006 04:08:53 -0600
bmanning () vacation karoshi com wrote:
I don't really think that preventing every Tom, Dick, and Harry from using my nameserver to look up domains I'm not authoritative for is going to cripple DNS. They really should have their own severs that do that for them, or they should use the ones provided to them by their ISP.Limit recursion to trusted netblocks and customers. Do not permit your name servers to provide recursion for the world. If you do, you will contribute to one of these attacks.<recursion is a fundamental DNS design feature, restricting it to "walled gardens" cripples its usefullness>
Current thread:
- Re: DNS deluge for x.p.ctrc.cc, (continued)
- Re: DNS deluge for x.p.ctrc.cc Randy Bush (Feb 24)
- Re: DNS deluge for x.p.ctrc.cc Gadi Evron (Feb 24)
- Re: DNS deluge for x.p.ctrc.cc brett watson (Feb 24)
- RE: DNS deluge for x.p.ctrc.cc Estes, Paul (Feb 24)
- Re: DNS deluge for x.p.ctrc.cc Gadi Evron (Feb 24)
- Re: DNS deluge for x.p.ctrc.cc Rob Thomas (Feb 24)
- Re: DNS deluge for x.p.ctrc.cc Stephen Stuart (Feb 24)
- Re: DNS deluge for x.p.ctrc.cc Chris Adams (Feb 24)
- Re: DNS deluge for x.p.ctrc.cc Jon Lewis (Feb 25)
- Re: DNS deluge for x.p.ctrc.cc bmanning (Feb 25)
- Re: DNS deluge for x.p.ctrc.cc Nicholas Suan (Feb 25)
- Re: DNS deluge for x.p.ctrc.cc Rob Thomas (Feb 25)
- Re: DNS deluge for x.p.ctrc.cc Randy Bush (Feb 25)
- Re: DNS deluge for x.p.ctrc.cc Paul Vixie (Feb 26)
- Re: DNS deluge for x.p.ctrc.cc Paul Vixie (Feb 26)
- Re: DNS deluge for x.p.ctrc.cc Jon Lewis (Feb 26)
- Re: DNS deluge for x.p.ctrc.cc Joe Provo (Feb 25)
- Re: DNS deluge for x.p.ctrc.cc Joe Abley (Feb 26)
- Re: DNS deluge for x.p.ctrc.cc Christopher L. Morrow (Feb 26)
- Re: DNS deluge for x.p.ctrc.cc Paul Vixie (Feb 26)
- Re: DNS deluge for x.p.ctrc.cc bmanning (Feb 26)