dns-operations AT lists.opennicproject.org

Subject: Dns-operations mailing list

List archive

Re: [opennic-dns-operations] Whitelist functions are now ready

From: Quinn Wood <wood.quinn.s AT gmail.com>
To: dns-operations AT lists.opennicproject.org
Subject: Re: [opennic-dns-operations] Whitelist functions are now ready
Date: Fri, 14 Feb 2014 06:15:45 -0600

On Fri, Feb 14, 2014 at 6:09 AM, Peter Green <peter AT greenpete.free> wrote:
> Do we/you know how OpenDNS combat this problem?
>
Just a few examples: a few people rate limit, others use scripts
(heuristics stuff like anti-spam) to create firewall rules, and others
force large queries that are still small enough for UDP to go over TCP
anyway. The last one is probably the most effective means to combat
influxes of spoofed requests without the user noticing a difference.
However not all DNS servers support it. BIND does not.

Re: [opennic-dns-operations] Whitelist functions are now ready, (continued)