Re: Non-existent zone file
Jakob Hirsch <[email protected]>
| Newsgroups | gmane.network.djbdns |
|---|---|
| Message-ID | <[email protected]> |
Rich Rumble wrote: > We run djbdns, and recently someone sent a huge spam campaign using a > domain we did not have a zone file for. We also did not register the > domain, but whoever did pointed it at our NS's and we were quickly > DDoS'd for a short amount of time until we created a dummy zone file > for said domain. Is there something we can do to help prevent this in What probably happened is that caching nameserver tried multiple times (because they got no answer) and tried again for every query they got themselves. Putting this in your data file could help: &::a.root-servers.net This tells everybody that asks you about zones you don't have to go ask the A root server. Not perfect but surely better than the default behaviour.