On Jan 1, 2014, at 7:21 AM, Gert Doering <[email protected]> wrote:
> Attackers have long started to use authoritatives as well. Which is why > Paul Vixie's RRL or Lutz Donnerhacke's dampening patches for BIND exist. You don’t need a patch anymore, it’s part of BIND 9.9.4 and later. Going to say this as well: Check your IP space for Open Resolvers here: http://openresolverproject.org/ It’s been almost a year since this project launched and the trends are not encouraging. Most of the devices are CPE which are somewhat lower risk, but any actual DNS server needs to be addressed. - Jared _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
