Sporadic but noticable SERVFAILs in specific nodes of an anycast resolving farm running BIND

[Doug Barton]

On 3/8/2014 1:30 PM, sthaug at nethelp.no wrote:
>>> One mitigation approach is to blackhole the domains using local zones.
>>
>> That�s not much of a mitigation. Not having open resolvers would be mitigation.
>
> Not having open resolvers is good - but unfortunately doesn't help
> against misbehaving clients (e.g. small home routers with DNS proxies
> open to queries from the WAN side).

There is a fairly long list of things that closing open resolvers won't 
fix, but one wonders how that is relevant?