[afnog] Looking behind the smoke screen of the Internet and Internationa Infrastructure: DNS recursive attacks, spamvrtised domains, phishing, botnet C&C's and you

[Gadi Evron]

Calvin Browne wrote:
> On Fri, 2006-02-17 at 14:49 +0200, Gadi Evron wrote:
> 
>>[X-posted]
>>
>>This text is meant for two (main) purposes:
>>1. Updating the community about recent threats.
>>2. Showing the community some suggestions of what can be done.
> 
> <SNIP>
> 
>>The buzz may be about the packet size/resulting fragmentation this time 
>>around, actual attacks seen in the wild on a wide scale, etc. 
>>Regardless, nothing new. Recursive is bad. Don't do it. :)
>>
> 
> <SNIP>
> 
> 'scuse me for being blond here, but if your resolvers are not recursive,
> how do they resolve?

"Do it securely" is what that should say. Thanks for pointing it out.

-- 
http://blogs.securiteam.com/

"Out of the box is where I live".
	-- Cara "Starbuck" Thrace, Battlestar Galactica.