Re: Best practice on TCP replies for ANY queries

[Alain Hebert <ahebert () pubnix net>]

    The internet will be better without ISP refusing to apply BCP38.

    <end of comment>

    This is a pointless argument since the majority of the industry
prefer going after the <flavor of the month> UDP flood instead of
curbing the problem at its source once and for all.

-----
Alain Hebert                                ahebert () pubnix net   
PubNIX Inc.        
50 boul. St-Charles
P.O. Box 26770     Beaconsfield, Quebec     H9W 6G7
Tel: 514-990-5911  http://www.pubnix.net    Fax: 514-990-9443

On 12/12/13 11:23, SiNA Rabbani wrote:
> http://www.team-cymru.org/Services/Resolvers/
>
> The Internet will be a better place with less open resolvers around.
>
> --SiNA
> On Dec 12, 2013 5:32 AM, "Tony Finch" <dot () dotat at> wrote:
>
> > Anurag Bhatia <me () anuragbhatia com> wrote:
> > > Now I see presence of some (legitimate) DNS forwarders and hence I don't
> > > wish to limit queries.
> > You are going to have to change your mind about this one. Open recursive
> > resolvers are a really bad idea, unless you can afford a lot of time and
> > cleverness to manage the abuse. Get your users to choose a more
> > appropriate name server, and restrict your name server to your local
> > networks.
> >
> > Tony.
> > --
> > f.anthony.n.finch  <dot () dotat at>  http://dotat.at/
> > Forties, Cromarty: East, veering southeast, 4 or 5, occasionally 6 at
> > first.
> > Rough, becoming slight or moderate. Showers, rain at first. Moderate or
> > good,
> > occasionally poor at first.