[88939] in North American Network Operators' Group
Re: DNS deluge for x.p.ctrc.cc
daemon@ATHENA.MIT.EDU (Stephen Stuart)
Fri Feb 24 17:59:46 2006
To: NANOG <nanog@merit.edu>
Cc: Rob Thomas <robt@cymru.com>
In-reply-to: Your message of "Fri, 24 Feb 2006 16:33:08 CST."
<Pine.GSO.4.62.0602241629470.21514@qentba.nf23028.arg>
Date: Fri, 24 Feb 2006 22:59:01 +0000
From: Stephen Stuart <stuart@tech.org>
Errors-To: owner-nanog@merit.edu
> Note we have our own Secure BIND Template which will help on the
> BIND side of life.
>
> <http://www.cymru.com/Documents/secure-bind-template.html>
>
> If you need assistance with any of this, have endured one of these
> attacks, or have any other questions, please don't hesitate to ping
> on us at team-cymru@cymru.com. We're here to assist!
... and if you have used the Secure BIND Template in the past but
perhaps haven't perused it lately, please take this opportunity to
examine the change log helpfully supplied at the top of the page. In
particular, some prefixes have been removed from the Secure BIND
Template's embedded bogon list; if you don't keep that information
current on authoritative nameservers, you'll ignore requests from
caching nameservers in FORMER bogon-list space that is now VALID
space.
Remember - bogon lists aren't just for routers, and must be kept up to
date.
Stephen
