Re: Avoiding being used as DDoS reflector.

2009-01-19 Thread JINMEI Tatuya / 神明達哉
At Mon, 19 Jan 2009 16:40:28 +1100, Nathan Ollerenshaw wrote: > I have an Authoritative BIND server. It is configured to only allow > recursive queries from localhost, with recursion disabled for any > remote clients. [snip] > The ideal solution for me, would be a bind configuration option

Re: Avoiding being used as DDoS reflector.

2009-01-19 Thread Chris Buxton
On Jan 19, 2009, at 7:48 AM, John Wobus wrote: Nathan Ollerenshaw escreveu: I have an Authoritative BIND server. It is configured to only allow recursive queries from localhost, with recursion disabled for any remote clients. If you attempt to perform a recursive query against this server

Re: Avoiding being used as DDoS reflector.

2009-01-19 Thread John Wobus
On Jan 19, 2009, at 5:02 AM, Leonardo Rodrigues Magalhães wrote: Nathan Ollerenshaw escreveu: I have an Authoritative BIND server. It is configured to only allow recursive queries from localhost, with recursion disabled for any remote clients. If you attempt to perform a recursive query

Re: Avoiding being used as DDoS reflector.

2009-01-19 Thread Leonardo Rodrigues Magalhães
Leonardo Rodrigues Magalhães escreveu: Nathan Ollerenshaw escreveu: I have an Authoritative BIND server. It is configured to only allow recursive queries from localhost, with recursion disabled for any remote clients. If you attempt to perform a recursive query against this server, it

Re: Avoiding being used as DDoS reflector.

2009-01-19 Thread Leonardo Rodrigues Magalhães
Nathan Ollerenshaw escreveu: I have an Authoritative BIND server. It is configured to only allow recursive queries from localhost, with recursion disabled for any remote clients. If you attempt to perform a recursive query against this server, it will respond with a "query refused" packet

Avoiding being used as DDoS reflector.

2009-01-18 Thread Nathan Ollerenshaw
Hi, I've searched around a bit, and noticed some others have similar problems as this but nobody has come up with a decent solution, or at least, I've not found one. I have an Authoritative BIND server. It is configured to only allow recursive queries from localhost, with recursion disabl