From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 0C991138010 for ; Fri, 29 Mar 2013 13:30:01 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 8CE0EE0CBB; Fri, 29 Mar 2013 13:29:49 +0000 (UTC) Received: from mail-wi0-f182.google.com (mail-wi0-f182.google.com [209.85.212.182]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 153E2E0CB5 for ; Fri, 29 Mar 2013 13:29:47 +0000 (UTC) Received: by mail-wi0-f182.google.com with SMTP id hi18so419878wib.15 for ; Fri, 29 Mar 2013 06:29:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:user-agent:mime-version:to:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=NLksNp1fSfi9uSRIEaXsrqXiAhcE7cVWWIey8xYDjXc=; b=J/EiBd6gCYG+vWtOSHfbqOnSiGmQ3qCO5849GOGkLvPfavwH5vHegBcLWWuQYhd2mO VO3qmlaeBFjkcQC2+Qnwaw+DkzHVa4iiTXt5OTDOGfnKjky2SlYa/cy+lccEeHYXiwJi vmXezQMDxuY308Wf7rOUMc4JHL2ratWIF8vy5/Pif9990WE+vEP9knNjMuediJKPC3WA tgy67GRo4QfEAqf65weWVktccLDACtxlOyZlv2v8z5Sl/QNb5hRY/9SW3kfP871DF4Qc o44Si7o7P6/JWKwU2IqHUqkLy7h2w8/CIDVpeO+cBD4REL8V82DP7LhCm70FkyK9kZ+l GG/g== X-Received: by 10.180.37.146 with SMTP id y18mr22367283wij.10.1364563786771; Fri, 29 Mar 2013 06:29:46 -0700 (PDT) Received: from [172.20.0.41] (196-210-114-11.dynamic.isadsl.co.za. [196.210.114.11]) by mx.google.com with ESMTPS id k5sm3947173wiy.5.2013.03.29.06.29.44 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 29 Mar 2013 06:29:45 -0700 (PDT) Message-ID: <515596B1.9050908@gmail.com> Date: Fri, 29 Mar 2013 15:27:13 +0200 From: Alan McKinnon User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130309 Thunderbird/17.0.4 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] How to prevent a dns amplification attack References: <51540497.5020008@smash-net.org> <5154A1BE.7010308@gmail.com> <201303290049.23399.peter@humphrey.ukfsn.org> <51555677.1050507@smash-net.org> In-Reply-To: <51555677.1050507@smash-net.org> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Archives-Salt: 055db118-b757-428b-9986-d5b9231a5433 X-Archives-Hash: 5a1367eff6e40d90a6580aa9321f04f7 On 29/03/2013 10:53, Norman Rieß wrote: >> That is just evil. Have you no alternative to this ISP? >> > >> > >> > >> > -- >> > >> > Peter >> > >> > >> > > Like free and open DNS servers? ;-) Like the one i am talking about and > was told it was unnessesary crap? When you describe the service you DO get from your ISP, then we can see that rolling your own is the proper alternative for you. Unless your ISP block outbound port 53... If you were in Africa, I could give you an alternative but sadly I don't think you are in Africa -- Alan McKinnon alan.mckinnon@gmail.com