Re: Non-existent zone file
"Charles Cazabon" <[email protected]>
| Newsgroups | gmane.network.djbdns |
|---|---|
| Message-ID | <[email protected]> |
Rich Rumble <[email protected]> wrote: > We run djbdns, and recently someone sent a huge spam campaign using a > domain we did not have a zone file for. We also did not register the > domain, but whoever did pointed it at our NS's and we were quickly > DDoS'd for a short amount of time Okay. DDoS attacks suck, but IP doesn't really provide a way to prevent them. > until we created a dummy zone file for said domain. Can you clarify what you mean? tinydns doesn't answer queries for domains that you haven't configured it to answer for -- it just drops the queries on the floor. Adding a "dummy zone file" (tinydns doesn't use zone files, just a single data file compiled to cdb format) for the domain should only have made things worse, as you would then start answering queries for that domain. > Is there something we can do to help prevent this in the future other than > adding more NS's to handle the load or creating zone files for domains we > don't own or haven't registered? You shouldn't need to do the latter, and I'm not sure why you thought doing the former would help. Charles -- ----------------------------------------------------------------------- Charles Cazabon GPL'ed software available at: http://pyropus.ca/software/ -----------------------------------------------------------------------