[nylug-talk] DNS servers

[Chris Knadle]

On Wednesday 17 October 2007, Kevin W wrote:
> >From what I understood from an RFC (and if I rember correclty it was
> > wirtten by cricket lu ) that early versions prior to BIND 8 were liable
> > to floods.
>
> Ill find the RFC and post it.

   Cricket Lu co-authored the O'Reilly book on "DNS and BIND", maybe that's 
what was being thought of.

   All of the Bind flooding attack info I can find relates to successive 
recursive or zone transfer queries, which is why those should be restricted.

   -- Chris

-- 

Chris Knadle
Chris.Knadle at coredump.us