From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 79418138010 for ; Thu, 28 Mar 2013 08:51:50 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id F250AE081D; Thu, 28 Mar 2013 08:51:40 +0000 (UTC) Received: from smash-net.org (smash-net.org [176.9.155.157]) (using TLSv1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 98380E07D1 for ; Thu, 28 Mar 2013 08:51:39 +0000 (UTC) Received: from smash-net.org (localhost [127.0.0.1]) by smash-net.org (Postfix) with ESMTP id 1785327A059B for ; Thu, 28 Mar 2013 09:51:38 +0100 (CET) Received: by smash-net.org (Postfix, from userid 65534) id E82A827A05DF; Thu, 28 Mar 2013 09:51:37 +0100 (CET) X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on heimdall X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED autolearn=disabled version=3.3.2 Received: from [IPv6:2a01:4f8:160:4183:250:56ff:fe00:1a05] (smash-net.org [IPv6:2a01:4f8:160:4183:250:56ff:fe00:1a05]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smash-net.org (Postfix) with ESMTPSA id 67B6927A059B for ; Thu, 28 Mar 2013 09:51:36 +0100 (CET) Message-ID: <51540497.5020008@smash-net.org> Date: Thu, 28 Mar 2013 09:51:35 +0100 From: =?ISO-8859-15?Q?Norman_Rie=DF?= User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130325 Thunderbird/17.0.4 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 To: gentoo-user@lists.gentoo.org Subject: [gentoo-user] How to prevent a dns amplification attack X-Enigmail-Version: 1.5.1 Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: 7bit X-Virus-Scanned: ClamAV using ClamSMTP X-Archives-Salt: 5a2a3018-d9d7-4635-9a5c-7d3334c76d9d X-Archives-Hash: 61839c2a01ee1937ee4e5dc0a34623ff Hello, i am using pdns recursor to provide a dns server which should be usable for everybody.The problem is, that the server seems to be used in dns amplification attacks. I googled around on how to prevent this but did not really find something usefull. Does anyone got an idea about this? Regards, Norman