nanog mailing list archives

Re: [SHAME] Spam Rats


From: "John R. Levine" <johnl () iecc com>
Date: 10 Jan 2013 01:08:03 -0500

One is a stunt rDNS server that synthesizes the records on demand.
(Bonus points for doing DNSSEC, too. Double bonus points for doing
NSEC3.)

NSEC3 is a waste of time in ip6.arpa or any similarly structured
zone so -1000000 for doing NEC3 and effectively doing a DoS attack
against yourself and the client resolvers.

I know, but figuring out on the fly what order the hashes are would be quite a coding feat.

R's,
John


Current thread: