Dns-operations mailing list

[Jeff Taylor <shdwdrgn AT sourpuss.net>]

It all goes on my firewall ;-)
Honestly it probably would be a good idea to collect everything
together.  I would suggest a link off of the T2 setup page, since the
T2's are the ones most likely to be attacked.

I'm actually in the process of writing new tier-2 wiki pages:
http://wiki.opennic.glue/Tier2ConfigBindHint
http://wiki.opennic.glue/Tier2ConfigBindSlave

I also need to rewrite the opennicZoneScript page to point to the latest
code, then I will create a new front page for the T2 setup.  This last
page would describe the various types of setups that can be done, and
would also be the place to link to a security-measures page.  It would
also be nice if anyone else were willing to write configuration pages
for any DNS programs other than bind.

I've set up an initial wiki page here: 
http://wiki.opennic.glue/Tier2Security


On 02/15/2013 03:12 PM, Peter Green wrote:
> Sorry to hear of the attacks Jeff, and thanks for posting those IP
> table rules.
>
> It made me think, is there one single place where all this info' goes?
> I'm thinking of the wiki.
>
> I can only find...
>
> http://wiki.opennicproject.org/ddosBlock
> http://wiki.opennicproject.org/AutoBlockRules
> http://wiki.opennicproject.org/DNSBlockList
>
> And I remember there being more regarding 'DNS Dampening'.
>
> It would be great of all this were in one place! :-)
>
> I'd like to be the one to offer collating this info' but this kind of
> thing is just a bit ahead of me and so don't really think I'm the best
> person to do it. :-/
>
> Peter