Bind dns amplification attack

[Nyamkhand Buluukhuu]

Hi,

No, I have an access list that allows only our ISP zones.

BR, Nyamka

________________________________
From: me at at.encryp.ch <me at at.encryp.ch>
Sent: Tuesday, March 28, 2023 3:40 PM
To: Nyamkhand Buluukhuu <nyamkhand at mobinet.mn>; bind-users at lists.isc.org <bind-users at lists.isc.org>
Subject: Re: Bind dns amplification attack

Are you an open recursor? If the answer is no, you should not face any amplifications attacks.

If you are an open recursor, the best solution is to restrict which IP addresses are allowed to access your recursor.
????????

?????? ????? ?????? ?? (????????????? ????) ?????? ?????? ?????????? ?????????, ?????? ???? ??? ????? ???????? ???????????? ?????. ?? ????? ??????? ??????????? ???????? ?? ??????? ?????????????, ????????? ???????? ?????? ?????? ??????????? ???????????? ???? ?????????? ? ??????? ????????????? ??? ?? ????????????? ??. ????? ?? ?? ????? ??????? ??????? ???????? ?????? ????? ??? ??? ?????? ????? ??????? ????????? ????? ????? ?????? ?????? ?????? ????????, ?????????? ????? ????? ????? ??????? ?????? ????????? ??? ????? ?????? ???? ??????? ???? ??. ???????? ?????? ???????? ??????????? ?????????? ?????? ????????? ?????????, ??????????, ?????? ?????? ????? ?? ??????????? ????????? ??????? ????? ?????? ????, ?? ?????? ????? ????? ??? ?????? ???????? ??.

Disclaimer

This email (including any attachments) is intended only to be read and used by the addressee. It may contain confidential or legally privileged information, which is not waived if it is mistakenly delivered to you. If you are not the intended recipient, please immediately notify the sender by return email and delete both messages from your system; any disclosure, copying, distribution, or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20230328/277d7592/attachment.htm>