bind: blackhole for invalid recursive queries?
- by Udo G
I have a name server that's publicly accessible since it is the authoritative name server for a couple of domains.
Currently the server is flooded with faked type ANY requests for isc.org, ripe.net and similar (that's a known distributed DoS attack).
The server runs BIND and has allow-recursion set to my LAN so that these requests are rejected.…