Re: .dk-TLD-problems
"Richard J. Sexton" <[email protected]>
| Newsgroups | gmane.network.djbdns |
|---|---|
| Message-ID | <[email protected]> |
At 10:49 PM 9/9/2009 -0700, Ask Bjørn Hansen wrote: > >On Sep 9, 2009, at 11:41, Tommy Mogensen wrote: > >> The way tinydns works if asked for a domain not hosted on the server, >> is just not answering and the client has to time out. The principle >> is - if you ask a tinydns server for a domain not delegated to it, > >Yeah, exactly. Responding with a large packet of root referrals is >just making it Very Easy to use your server in an amplification attack. Ectuallu I like the idea of returning the pointer to one root sevrer rather than the NS RR set of all of them. -- Richard J. Sexton [email protected] +1 (206) 333-1798 http://rs79.vrx.net http://mbz.org http://killi.net http://aquaria.net