[161791] in North American Network Operators' Group
Re: Open Resolver Problems
daemon@ATHENA.MIT.EDU (Mark Andrews)
Tue Mar 26 22:50:40 2013
To: Matthew Petach <mpetach@netflight.com>
From: Mark Andrews <marka@isc.org>
In-reply-to: Your message of "Tue, 26 Mar 2013 19:14:08 PDT."
<CAEmG1=qgJmvCXg9qvk8RVtURyAWmuQLz7yWraQ4TPUkccPxoLw@mail.gmail.com>
Date: Wed, 27 Mar 2013 13:50:20 +1100
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
In message <CAEmG1=qgJmvCXg9qvk8RVtURyAWmuQLz7yWraQ4TPUkccPxoLw@mail.gmail.com>
, Matthew Petach writes:
> In terms of impacts people are feeling today, is most of the pain
> coming from open recursive servers being abused by miscreants,
> or from miscreants doing spoofed queries against authoritative
> nameservers?
Both are currently being abused.
Rate limiting itself causes operational problems for legitimate
users of authoritative servers and will only have a limited effect
for a limited time. It is a stop gap measure.
Mark
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka@isc.org
