23 Jan 2013
Mirror - Mirror – Resources on DNS reflection attacks
NCSC 2013 conference Presentation
RFC and BCP
DNS Monitoring
DNS reflection and amplification attacks
Open Resolvers
Minimal Responses
RateLimit
- Tony Finch - Rate limiting DNS
- BIND 9 patches by Paul Vixie and Vernon Schryver
- BIND 9 binaries for MacOS X, Debian, RedHat, Solaris with RRL patches applied (look for RRL in the filename)
- DNS Dampening by Lutz Donnerhacke
- DNS Response Rate Limit in NSD
- RRL in the Knot DNS Server (CZ.NIC Labs)
- BIND 10 RRL checkin information
