Groups > comp.protocols.dns.bind > #15921

Re: DNS security, amplification attacks and recursion

Path	csiph.com!news.uzoreto.com!news.etla.org!nntp-feed.chiark.greenend.org.uk!ewrotcd!usenet-its.stanford.edu!usenet.stanford.edu!not-for-mail
From	Brett Delmage <Brett@brettdelmage.ca>
Newsgroups	comp.protocols.dns.bind
Subject	Re: DNS security, amplification attacks and recursion
Date	Tue, 7 Jul 2020 14:42:12 -0400 (EDT)
Lines	15
Approved	bind-users@lists.isc.org
Message-ID	<mailman.634.1594147309.942.bind-users@lists.isc.org> (permalink)
References	<7adcb06a-4d03-7362-6f4a-29b3fb223697@nixmagic.com> <alpine.DEB.2.20.2007071426460.21235@grey.csi.cam.ac.uk> <alpine.DEB.2.21.2007071417041.10687@pannier.local> <CAHPuVdUmVGE068YpM97kk+gqCJZej4Ax30G687=q20Y2t-eA4A@mail.gmail.com> <alpine.DEB.2.21.2007071441070.10687@pannier.local>
NNTP-Posting-Host	lists.isc.org
Mime-Version	1.0
Content-Type	multipart/mixed; boundary="8323328-1191164296-1594147332=:10687"
X-Trace	usenet.stanford.edu 1594147343 16198 149.20.1.60 (7 Jul 2020 18:42:23 GMT)
X-Complaints-To	action@cs.stanford.edu
To	bind-users <bind-users@lists.isc.org>
Return-Path	<Brett@brettdelmage.ca>
X-Original-To	bind-users@lists.isc.org
Delivered-To	bind-users@lists.isc.org
DKIM-Signature	v=1; a=rsa-sha256; c=relaxed/relaxed; d=BrettDelmage.ca; s=20200706a; t=1594147332; bh=ESxPIOzYU11HcVPpl+a/K3dMylXcgO+hdW+QXQN4n3M=; h=Date:From:To:Subject:In-Reply-To:References:From; b=O6JsZD2nhy2/seRKhunu704Mw6jHHGp0MpYjUhSschuITsaYFS4Mkm2GQZjNcOgpV vyxh2bwXRNYgH6WZke2p9ykrKkWrt/ElbcHUalqzBnFaQojMcNIYVuC5pSctjbtyxY y9tcidaeetGKMGzyEWvqTiB8Lb6qgcnlJF0UESLvvu0mzV/jNvrFDb/n7wBnCadWFx kQduxRyO9mC79dNKhY9T+8o557YEB12mjriabSoUAKxxpk+mekAgs33/88wpTy3vsb 9DyUsDAYqYbJ324gwpjQnQrW9iprl/kZwkTyonj1qQDs4d0aNjU5P6NXEUg+eBlyyV G9gFYCKSEh5eg==
In-Reply-To	<CAHPuVdUmVGE068YpM97kk+gqCJZej4Ax30G687=q20Y2t-eA4A@mail.gmail.com>
X-Spam-Status	No, score=1.8 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,DKIM_VALID_EF,PDS_TONAME_EQ_TOLOCAL_SHORT,SPF_PASS, T_SPF_HELO_PERMERROR autolearn=disabled version=3.4.2
X-Spam-Level	*
X-Spam-Checker-Version	SpamAssassin 3.4.2 (2018-09-13) on mx.pao1.isc.org
X-BeenThere	bind-users@lists.isc.org
X-Mailman-Version	2.1.29
Precedence	list
List-Id	BIND Users Mailing List <bind-users.lists.isc.org>
List-Unsubscribe	<https://lists.isc.org/mailman/options/bind-users>, <mailto:bind-users-request@lists.isc.org?subject=unsubscribe>
List-Archive	<https://lists.isc.org/pipermail/bind-users/>
List-Post	<mailto:bind-users@lists.isc.org>
List-Help	<mailto:bind-users-request@lists.isc.org?subject=help>
List-Subscribe	<https://lists.isc.org/mailman/listinfo/bind-users>, <mailto:bind-users-request@lists.isc.org?subject=subscribe>
X-Mailman-Original-Message-ID	<alpine.DEB.2.21.2007071441070.10687@pannier.local>
X-Mailman-Original-References	<7adcb06a-4d03-7362-6f4a-29b3fb223697@nixmagic.com> <alpine.DEB.2.20.2007071426460.21235@grey.csi.cam.ac.uk> <alpine.DEB.2.21.2007071417041.10687@pannier.local> <CAHPuVdUmVGE068YpM97kk+gqCJZej4Ax30G687=q20Y2t-eA4A@mail.gmail.com>
Xref	csiph.com comp.protocols.dns.bind:15921

Show key headers only | View raw

[Multipart message — attachments visible in raw view] - view raw

On Tue, 7 Jul 2020, Shumon Huque wrote:

> Cloudflare themselves now implement the "minimal any" behavior described
> in this spec:
> 
>     https://tools.ietf.org/html/rfc8482

> cloudflare.com.         3789    IN      HINFO   "RFC8482" ""

Gee, that's a pretty minimal answer! Thanks.

Back to comp.protocols.dns.bind | Previous | Next | Find similar

Thread

Re: DNS security, amplification attacks and recursion Brett Delmage <Brett@brettdelmage.ca> - 2020-07-07 14:42 -0400

csiph-web