Path: csiph.com!news.uzoreto.com!news.etla.org!nntp-feed.chiark.greenend.org.uk!ewrotcd!usenet-its.stanford.edu!usenet.stanford.edu!not-for-mail
From: Michael De Roover <isc@nixmagic.com>
Newsgroups: comp.protocols.dns.bind
Subject: Re: issue of Amplification attack
Date: Sun, 12 Jul 2020 12:48:56 +0200
Lines: 14
Approved: bind-users@lists.isc.org
Message-ID: <mailman.697.1594550927.942.bind-users@lists.isc.org>
References: <mailman.4466.1594382486.941.bind-users@lists.isc.org> <675429057.121047.1594527824988.JavaMail.open-xchange@webmail.cdac.in> <4b193b9a-ae4f-a66f-ebe2-3fe0ebfdb843@ghnou.su>
NNTP-Posting-Host: lists.isc.org
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Trace: usenet.stanford.edu 1594550963 12423 149.20.1.60 (12 Jul 2020 10:49:23 GMT)
X-Complaints-To: action@cs.stanford.edu
To: bind-users@lists.isc.org
Return-Path: <isc@nixmagic.com>
X-Original-To: bind-users@lists.isc.org
Delivered-To: bind-users@lists.isc.org
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:68.0) Gecko/20100101 Thunderbird/68.9.0
In-Reply-To: <675429057.121047.1594527824988.JavaMail.open-xchange@webmail.cdac.in>
Content-Language: en-US
X-Spam-Status: No, score=1.7 required=5.0 tests=DEAR_SOMETHING, SPF_HELO_PASS, SPF_PASS autolearn=disabled version=3.4.2
X-Spam-Level: *
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mx.pao1.isc.org
X-BeenThere: bind-users@lists.isc.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: BIND Users Mailing List <bind-users.lists.isc.org>
List-Unsubscribe: <https://lists.isc.org/mailman/options/bind-users>, <mailto:bind-users-request@lists.isc.org?subject=unsubscribe>
List-Archive: <https://lists.isc.org/pipermail/bind-users/>
List-Post: <mailto:bind-users@lists.isc.org>
List-Help: <mailto:bind-users-request@lists.isc.org?subject=help>
List-Subscribe: <https://lists.isc.org/mailman/listinfo/bind-users>, <mailto:bind-users-request@lists.isc.org?subject=subscribe>
X-Mailman-Original-Message-ID: <4b193b9a-ae4f-a66f-ebe2-3fe0ebfdb843@ghnou.su>
X-Mailman-Original-References: <mailman.4466.1594382486.941.bind-users@lists.isc.org> <675429057.121047.1594527824988.JavaMail.open-xchange@webmail.cdac.in>
Xref: csiph.com comp.protocols.dns.bind:15971

There was a very interesting conversation about this last week. See 
https://www.mail-archive.com/bind-users@lists.isc.org/msg29187.html.

On 7/12/20 6:23 AM, ShubhamGoyal wrote:
> Dear sir,
>                          Thank you  for give me answer for my previous 
> question,  Sir now we are suffer from amplification attack so is there 
> any method in bind to stop DNS Amplification attack.
> I am thinking to stop or drop ANY type queries from our DNS Recursive 
> resolver , so please tell me how can we drop or stop ANY type queries 
> from bind.
-- 
Met vriendelijke groet / Best regards,
Michael De Roover