DNS DDoS protection

Marco mo01 at posteo.de
Fri Feb 24 20:38:58 UTC 2023


Am 24.02.2023 um 20:09:15 Uhr schrieb King, Harold Clyde (Hal):

> I would like to hear the latest configurations for BIND to help with
> DDoS.

There are some basic configurations:
Allow recursion only for you own networks - not for the global
internet, to avoid amplify attacks and to avoid recursive queries from
everywhere.

What is the purpose of you installation?
Is your server authoritative to a public DNS zone like example.org?


More information about the bind-users mailing list