1. Forum
  2. USENET
  3. comp.protocols.dns.bind

  • Re: issue of Amplification attack

    From Michael De Roover@isc@nixmagic.com to bind-users on Sun Jul 12 12:48:56 2020
    From Newsgroup: comp.protocols.dns.bind

    There was a very interesting conversation about this last week. See https://www.mail-archive.com/bind-users@lists.isc.org/msg29187.html.

    On 7/12/20 6:23 AM, ShubhamGoyal wrote:
    Dear sir,
    -a-a-a-a-a-a-a-a-a-a-a-a-a-a-a-a-a-a-a-a-a-a-a-a Thank you-a for give me answer for my previous
    question,-a Sir now we are suffer from amplification attack so is there
    any method in bind to stop DNS Amplification attack.
    I am thinking to stop or drop ANY type queries from our DNS Recursive resolver , so please tell me how can we drop or stop ANY type queries
    from bind.
    --
    Met vriendelijke groet / Best regards,
    Michael De Roover
    --- Synchronet 3.21d-Linux NewsLink 1.2
  • From Matus UHLAR - fantomas@uhlar@fantomas.sk to bind-users on Sun Jul 12 14:28:50 2020
    From Newsgroup: comp.protocols.dns.bind

    On 7/12/20 6:23 AM, ShubhamGoyal wrote:
    aaaaaaaaaaaaaaaaaaaaaaaa Thank youa for give me answer for my
    previous question,a Sir now we are suffer from amplification attack
    so is there any method in bind to stop DNS Amplification attack.
    I am thinking to stop or drop ANY type queries from our DNS
    Recursive resolver , so please tell me how can we drop or stop ANY
    type queries from bind.

    On 12.07.20 12:48, Michael De Roover wrote:
    There was a very interesting conversation about this last week. See >https://www.mail-archive.com/bind-users@lists.isc.org/msg29187.html.

    alternative link: https://lists.isc.org/pipermail/bind-users/2020-July/103389.html

    I find it more readable.
    --
    Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
    Warning: I wish NOT to receive e-mail advertising to this address.
    Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
    (R)etry, (A)bort, (C)ancer
    --- Synchronet 3.21d-Linux NewsLink 1.2
  • From @lbutlr@kremels@kreme.com to bind-users on Sun Jul 12 07:09:53 2020
    From Newsgroup: comp.protocols.dns.bind

    On 12 Jul 2020, at 06:28, Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote:
    On 7/12/20 6:23 AM, ShubhamGoyal wrote:
    I am thinking to stop or drop ANY type queries from our DNS Recursive resolver , so please tell me how can we drop or stop ANY type queries from bind.
    Don't do this.
    On 12.07.20 12:48, Michael De Roover wrote:
    There was a very interesting conversation about this last week. See https://www.mail-archive.com/bind-users@lists.isc.org/msg29187.html.

    alternative link: https://lists.isc.org/pipermail/bind-users/2020-July/103389.html
    Specifically read this message before you decide you want to disable responses to ANY.
    <https://lists.isc.org/pipermail/bind-users/2020-July/103399.html>
    --
    "I can't see the point in the theatre. All that sex and violence. I
    get enough of that at home. Apart from the sex, of course." -
    Baldrick
    --- Synchronet 3.21d-Linux NewsLink 1.2