dns-operations AT lists.opennicproject.org

Subject: Dns-operations mailing list

List archive

Re: [opennic-dns-operations] Whitelist functions are now ready

From: Peter Green <peter AT greenpete.free>
To: dns-operations AT lists.opennicproject.org
Subject: Re: [opennic-dns-operations] Whitelist functions are now ready
Date: Thu, 13 Feb 2014 12:48:20 +0000

Would it be possible to identify an amplification attack based on the request? i.e. If the request was for a response that was unusual, say to repy in an unusual way, to more addresses than would be expected.

A bit like spam detection, evaluate if the request fits known paterns.

Peter

--
Wanged from my Kaiser by a mischievous pixie!

Re: [opennic-dns-operations] massive TLDs coming.., (continued)