Tag Info

New answers tagged


Disabling recursion responses on public DNS servers to random internet IPs - ie closing the "open resolver" hole - does NOT mitigate this because you can still do a spoofed DNS reflector/amplification attack simply by sending queries that result in a "can't give you an answer" response, which can still be much larger than the incoming query. Really need to ...

Top 50 recent answers are included