Groups > comp.protocols.dns.bind > #15973

Re: issue of Amplification attack

From	"@lbutlr" <kremels@kreme.com>
Newsgroups	comp.protocols.dns.bind
Subject	Re: issue of Amplification attack
Date	2020-07-12 07:09 -0600
Message-ID	<mailman.699.1594559367.942.bind-users@lists.isc.org> (permalink)
References	<mailman.4466.1594382486.941.bind-users@lists.isc.org> <675429057.121047.1594527824988.JavaMail.open-xchange@webmail.cdac.in> <4b193b9a-ae4f-a66f-ebe2-3fe0ebfdb843@ghnou.su> <20200712122850.GA8298@fantomas.sk> <CAF9B1DB-81C1-4C98-89AE-9E6C57AD328B@kreme.com>

Show all headers | View raw

On 12 Jul 2020, at 06:28, Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote:
>> On 7/12/20 6:23 AM, ShubhamGoyal wrote:
>>> I am thinking to stop or drop ANY type queries from our DNS Recursive resolver , so please tell me how can we drop or stop ANY type queries from bind.

Don't do this.

> On 12.07.20 12:48, Michael De Roover wrote:
>> There was a very interesting conversation about this last week. See https://www.mail-archive.com/bind-users@lists.isc.org/msg29187.html.
> 
> alternative link:
> https://lists.isc.org/pipermail/bind-users/2020-July/103389.html

Specifically read this message before you decide you want to disable responses to ANY.

<https://lists.isc.org/pipermail/bind-users/2020-July/103399.html>



-- 
"I can't see the point in the theatre. All that sex and violence. I
	get enough of that at home. Apart from the sex, of course." -
	Baldrick

Back to comp.protocols.dns.bind | Previous | Next | Find similar

Thread

Re: issue of Amplification attack "@lbutlr" <kremels@kreme.com> - 2020-07-12 07:09 -0600

csiph-web