> If there is any chance to reach your recursive/forwarding server from the
> nets -
> make sure to setup authentication, so that you do not end up participating
> in
> DNS amplification attacks.
>

LOL, I've done that (some years ago). You don't want to do that! Not least
because even after you have fixed it, the attacker doesn't know you fixed
it (they forged the source address, so they never actually see a reply) and
they'll keep hammering you for some time. Fun times.

-- 
Russell Senior
[email protected]
_______________________________________________
PLUG mailing list
[email protected]
http://lists.pdxlinux.org/mailman/listinfo/plug

Reply via email to