[161720] in North American Network Operators' Group
Re: Open Resolver Problems
daemon@ATHENA.MIT.EDU (Mikael Abrahamsson)
Tue Mar 26 07:54:51 2013
Date: Tue, 26 Mar 2013 12:54:40 +0100 (CET)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: nanog@nanog.org
In-Reply-To: <515080A0.8030203@foobar.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Mon, 25 Mar 2013, Nick Hilliard wrote:
> The best solution is to disable open recursion completely, and police
> your clients regularly.
Is there an officially sounding document with "open resolver considered
harmful" or alike?
It's not trivial to deal with a corporate client with an open resolver.
You can't really shut them off, can't filter them etc. Googling for <open
resolver considered harmful> yields nothing I can point customers to.
<http://www.ietf.org/rfc/rfc5358.txt> is the closest I can find?
--
Mikael Abrahamsson email: swmike@swm.pp.se