Discuss mailing list

[Tim Groeneveld <tim AT timgws.com.au>]

----- Original Message -----
> 
> 
> ----- Original Message -----
> > Rate-limiting is the best first-step in this game. Even if you
> > can't
> > prevent your server from being used in an attack, you can at least
> > greatly limit the actual damage being done to yourself and the
> > intended target. I would highly recommend that ALL public DNS
> > servers implement some manner of rate limiting.
> 
> 
> This is correct.
> 

Also, of note, there is a patch for BIND 9 rate limiting,
which can be found here

http://ss.vix.su/~vjs/rrlrpz.html

Regards,
Tim