Prevent DNS Amplification Attacks with BIND

DNS amplification attacks are a common form of DDoS that makes used of misconfigured DNS servers on the internet. The attack involves sending a request to the misconfigured DNS server, with a spoofed source IP address, so the response goes back to a third party (the target/victim). The attacker will use the largest DNS query possible, so that more data is sent to the target IP address, flooding their connection. To help prevent these attacks, always make sure your DNS…

Read more [...]