Discuss mailing list

[Quinn Wood <wood.quinn.s AT gmail.com>]

On 6/10/13, Alex Hanselka <alex AT opennicproject.org> wrote:
> Interesting.  Since this is unlikely to be used for any real dns info
> there is likely a way to just kill any packets requesting that (I suck
> at iptables).  Or perhaps just putting up an empty dummy zone.
>
Perhaps instead of making claims that a zone won't be used for
anything than attacks backed on its name, folks should perform
heuristics checks on, I don't know, the actual zone.

Any Tom, Dick, or Harry can register stopddos.est and pop the same
records into it.