issue of Amplification attack

Reindl Harald h.reindl at thelounge.net
Sun Jul 12 06:49:23 UTC 2020



Am 12.07.20 um 06:23 schrieb ShubhamGoyal:
> Dear sir,
> Thank you  for give me answer for my previous
> question,  Sir now we are suffer from amplification attack so is there
> any method in bind to stop DNS Amplification attack.
> I am thinking to stop or drop ANY type queries from our DNS Recursive
> resolver , so please tell me how can we drop or stop ANY type queries
> from bind.

there where a recent discussion you missed in the past few days, our
config for years:

options {
 .......
 minimal-responses      yes;
 minimal-any            yes;
 rate-limit
 {
  responses-per-second 10;
  window               5;
 };
}



More information about the bind-users mailing list