From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id E3D32138010 for ; Thu, 28 Mar 2013 20:57:31 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 9F248E0A45; Thu, 28 Mar 2013 20:57:19 +0000 (UTC) Received: from nm4.bullet.mail.ird.yahoo.com (nm4.bullet.mail.ird.yahoo.com [77.238.189.61]) by pigeon.gentoo.org (Postfix) with SMTP id 1F880E09CD for ; Thu, 28 Mar 2013 20:57:17 +0000 (UTC) Received: from [212.82.105.245] by nm4.bullet.mail.ird.yahoo.com with NNFMP; 28 Mar 2013 20:57:17 -0000 Received: from [46.228.39.50] by tm17.bullet.mail.ird.yahoo.com with NNFMP; 28 Mar 2013 20:57:17 -0000 Received: from [127.0.0.1] by smtp183.mail.ir2.yahoo.com with NNFMP; 28 Mar 2013 20:57:17 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1364504237; bh=4F9c4m+E62IukkGeegO+ocSenGZEZ6ETsd2ZjdzE2JI=; h=X-Yahoo-Newman-Id:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:X-Rocket-Received:Date:From:To:Subject:Message-ID:In-Reply-To:References:Mime-Version:Content-Type:Content-Transfer-Encoding; b=Yt7CUues5ZVUp9kSp8omErgOyUx3NOd9JxN4/2flyPgyrWxG+Ynshg0gaopcoYgyY3oc4fOug6J+f/gHPQZzUPXB7fVe43kAlF2i0df4hnumeMGXu1TKYfDCDG9cVBVqCPpn7tVv5xCIr3Sq6DY7UgJrjGiKsXl23FGFSTu6op4= X-Yahoo-Newman-Id: 356656.2091.bm@smtp183.mail.ir2.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: Y_DrMJoVM1nWynOfLTKeOgwSnbtWOOWpAkJ9Gdng6Jn6kAt 2SuqNrCQQeyRwkDRA0lDl5quLYw_qPOEQ6sbYTfAsARucZi3zZhZRMbmyVsH 5_4nZbNrwwuLMHzyfKK54mPk7zvRE5VIXmhz2fFZM3D2iJolbspgp1TOwrSx fdXBswXbxRfahd3D7kkZZMkUiHGk.wT64g.ftnYOgR7PB3CWhm2ydyTqb3mR nnv5X394PqKBKM_8l_kDvUcsoOHu4E7SAimlGIanXy_ujcRg9cP02XvFV45h 3G051iSMxY9llOEuIT9blxVn2dNGpEaj48f9J7PWq6tqOokjRidNRPPmeuqV yZcnw1m9Xzi13YW1u_FTPUv.po.TT8lcpQictts2vO2C5Ip2gPo33vzLtIto 4QCEGLTRw5wtjOdCilyD7ecMwV.agR_4l4BKt2HNatC7IIMVP X-Yahoo-SMTP: UxXxlhuswBC4wbdewolpwSmT1iJVzQ-- X-Rocket-Received: from kc-sys.chadwicks.me.uk (ma1l1ists@92.27.156.6 with login) by smtp183.mail.ir2.yahoo.com with SMTP; 28 Mar 2013 20:57:17 +0000 UTC Date: Thu, 28 Mar 2013 20:57:56 +0000 From: Kevin Chadwick To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] How to prevent a dns amplification attack Message-ID: <20130328205756.4a0c54c9@kc-sys.chadwicks.me.uk> In-Reply-To: <20130328205151.7d03b413@kc-sys.chadwicks.me.uk> References: <51540497.5020008@smash-net.org> <20130328205151.7d03b413@kc-sys.chadwicks.me.uk> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Archives-Salt: 14d4eae9-e46a-444f-8cf6-a01bba40c83f X-Archives-Hash: 88d562258cbaf516ed7d72e5e4cdef59 > listened to the dangers and even now simply redesigned DNSSEC. Or they could fudge it by making every request requiring padding larger than the response. Bandwidth would increase astronomically but amp attacks would have to find other avenues.