DNS RRL looks for unnatural similarities in a <ip-src, dns-response>
flow, and limits the rate accordingly. it will not stop a random-sourced
attack nor a widely-reflected attack, but it has been shown to stop
targetted attacks using a small number of reflectors.
there is a technical note at<http://www.redbarn.org/dns/ratelimits>
which describes the approach in detail.
Thank you. I will read it now.
--
Email/Jabber/Gtalk: [email protected]
Free DNS Hosting with www.DNSbed.com
_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
