Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.protocols.dns.bind > #15982

Re: issue of Amplification attack

Path csiph.com!news.mixmin.net!gandalf.srv.welterde.de!newsfeed.xs3.de!nntp-feed.chiark.greenend.org.uk!ewrotcd!usenet-its.stanford.edu!usenet.stanford.edu!not-for-mail
From Reindl Harald <h.reindl@thelounge.net>
Newsgroups comp.protocols.dns.bind
Subject Re: issue of Amplification attack
Date Sun, 12 Jul 2020 08:49:23 +0200
Organization the lounge interactive design
Lines 25
Approved bind-users@lists.isc.org
Message-ID <mailman.718.1594899666.942.bind-users@lists.isc.org> (permalink)
References <mailman.4466.1594382486.941.bind-users@lists.isc.org> <675429057.121047.1594527824988.JavaMail.open-xchange@webmail.cdac.in> <07f55422-73a3-9c44-9099-3e44fc94c4d9@thelounge.net>
NNTP-Posting-Host lists.isc.org
Mime-Version 1.0
Content-Type text/plain; charset=utf-8
Content-Transfer-Encoding 8bit
X-Trace usenet.stanford.edu 1594899703 31476 149.20.1.60 (16 Jul 2020 11:41:43 GMT)
X-Complaints-To action@cs.stanford.edu
To bind-users@lists.isc.org
Return-Path <h.reindl@thelounge.net>
X-Original-To bind-users@lists.isc.org
Delivered-To bind-users@lists.isc.org
User-Agent Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0
In-Reply-To <675429057.121047.1594527824988.JavaMail.open-xchange@webmail.cdac.in>
Content-Language en-US
X-Spam-Status No, score=1.0 required=5.0 tests=DEAR_SOMETHING, RCVD_IN_DNSWL_LOW,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_HELO_PASS, SPF_PASS autolearn=disabled version=3.4.2
X-Spam-Level *
X-Spam-Checker-Version SpamAssassin 3.4.2 (2018-09-13) on mx.pao1.isc.org
X-Mailman-Approved-At Thu, 16 Jul 2020 11:41:04 +0000
X-BeenThere bind-users@lists.isc.org
X-Mailman-Version 2.1.29
Precedence list
List-Id BIND Users Mailing List <bind-users.lists.isc.org>
List-Unsubscribe <https://lists.isc.org/mailman/options/bind-users>, <mailto:bind-users-request@lists.isc.org?subject=unsubscribe>
List-Archive <https://lists.isc.org/pipermail/bind-users/>
List-Post <mailto:bind-users@lists.isc.org>
List-Help <mailto:bind-users-request@lists.isc.org?subject=help>
List-Subscribe <https://lists.isc.org/mailman/listinfo/bind-users>, <mailto:bind-users-request@lists.isc.org?subject=subscribe>
X-Mailman-Original-Message-ID <07f55422-73a3-9c44-9099-3e44fc94c4d9@thelounge.net>
X-Mailman-Original-References <mailman.4466.1594382486.941.bind-users@lists.isc.org> <675429057.121047.1594527824988.JavaMail.open-xchange@webmail.cdac.in>
Xref csiph.com comp.protocols.dns.bind:15982

Show key headers only | View raw



Am 12.07.20 um 06:23 schrieb ShubhamGoyal:
> Dear sir,
> Thank you  for give me answer for my previous
> question,  Sir now we are suffer from amplification attack so is there
> any method in bind to stop DNS Amplification attack.
> I am thinking to stop or drop ANY type queries from our DNS Recursive
> resolver , so please tell me how can we drop or stop ANY type queries
> from bind.

there where a recent discussion you missed in the past few days, our
config for years:

options {
 .......
 minimal-responses      yes;
 minimal-any            yes;
 rate-limit
 {
  responses-per-second 10;
  window               5;
 };
}

Back to comp.protocols.dns.bind | Previous | Next | Find similar


Thread

Re: issue of Amplification attack Reindl Harald <h.reindl@thelounge.net> - 2020-07-12 08:49 +0200

csiph-web