> Restrict resolvers to your customer networks. 

And if you have authoritative DNSSEC zones or other zones with large answers it 
might be a good idea to look at rate limiting the authoritative servers: 
http://www.redbarn.org/dns/ratelimits

- Sander


_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to