Re:IT Pro confession: I contributed to the DDOS attack again...
by mindstab on Thursday March 28, 2013 @12:14PM
(#5455697)
Whats a simple way to confirm by test your DNS server isn't doing recursion?
[ Parent
| on HN ]
Re:IT Pro confession: I contributed to the DDOS attack again...
by tquai on Thursday March 28, 2013 @12:45PM
(#5455944)
The Open DNS Resolver Project has a list of 25 million open resolvers. You can query their database for your IP address or up to a /24. Their site also has information on how to reduce or eliminate the problem via a couple options (RRL, BCP38). If you run a BIND resolver, consider switching to unbound. Part of this problem is rooted in BIND combining resolver and authoritative service in one daemon, which IMO "mis-educated" a lot of people.
Re:IT Pro confession: I contributed to the DDOS attack again...
by rhizome on Thursday March 28, 2013 @12:21PM
(#5455759)
A little Googling can often help:
http://dnsknowledge.com/bind/howto-test-bind-open-recursive-...