Discuss mailing list

[Julian De Marchi <julian AT jdcomputers.com.au>]

Jeff Taylor wrote:
> Yeah we've run into dns amplification attacks in the past, and we're all
> aware that the IP's are spoofed.  I run shorewall here, and have
> verified that I have enabled anti-spoofing in iptables, yet somehow
> these packets are still getting through.  Maybe iptables is forwarding
> the packets to the DNS server before the anti-spoofing measures are
> checked?  I don't know, but it's annoying...

IIRC, anit-spoofing is just protection against your own IPs....

--julian