Re: Non-existent zone file

"Charles Cazabon" <[email protected]>
Newsgroups gmane.network.djbdns
Message-ID <[email protected]>
Rich Rumble <[email protected]> wrote:
> We run djbdns, and recently someone sent a huge spam campaign using a
> domain we did not have a zone file for. We also did not register the
> domain, but whoever did pointed it at our NS's and we were quickly
> DDoS'd for a short amount of time

Okay.  DDoS attacks suck, but IP doesn't really provide a way to prevent them.

> until we created a dummy zone file for said domain.

Can you clarify what you mean?  tinydns doesn't answer queries for domains
that you haven't configured it to answer for -- it just drops the queries on
the floor.  Adding a "dummy zone file" (tinydns doesn't use zone files, just a
single data file compiled to cdb format) for the domain should only have made
things worse, as you would then start answering queries for that domain.

> Is there something we can do to help prevent this in the future other than
> adding more NS's to handle the load or creating zone files for domains we
> don't own or haven't registered?

You shouldn't need to do the latter, and I'm not sure why you thought doing
the former would help.

Charles
-- 
-----------------------------------------------------------------------
Charles Cazabon
GPL'ed software available at:               http://pyropus.ca/software/
-----------------------------------------------------------------------
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.