Comment Re:djbdns (Score 1) 192
By doing that you will resolve most of the problem.
However, with the current state of DNS servers, even if you do not do recursive resolution on your DNS server (or only do it for your IP Address space), you could be used to do a DDDoS attack.
I could send you a query for one of the domains for which you are authoritative, using a spoofed IP address, and you will respond to the victim. The "amplification effect" still works, only it can not be "custom amplified", I have to stick with whathever records you happen to have.
p.
However, with the current state of DNS servers, even if you do not do recursive resolution on your DNS server (or only do it for your IP Address space), you could be used to do a DDDoS attack.
I could send you a query for one of the domains for which you are authoritative, using a spoofed IP address, and you will respond to the victim. The "amplification effect" still works, only it can not be "custom amplified", I have to stick with whathever records you happen to have.
p.
