News for hackers. Stuff that matters.

A comment on Why might you run your own DNS server?.

Re:Why might you run your own DNS server? by asimops on Wednesday January 05, 2022 @03:03PM (#29814167)
Some warning. Please do not put a resolver directly onto the internet. As nice as it might be to have a DNS ad-blocker or your own names reachable all over the internet, the server will be part of DDOS attacks through traffic amplification and you don't want that.
[ Parent | on HN ]
Re:Why might you run your own DNS server? by gitgrump on Wednesday January 05, 2022 @03:05PM (#29814202)
If anyone wants to learn more, here's why open recursive resolvers are a bad idea: https://www.cloudflare.com/learning/dns/what-is-recursive-dn...
[ Parent | on HN ]
Re:Why might you run your own DNS server? by zinekeller on Wednesday January 05, 2022 @03:44PM (#29814657)
> Please do not put a resolver directly onto the internet.

Consider using DoT or DoH instead, or at the very least disable UDP queries (there's a slight penalty though).

[ Parent | on HN ]