<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><br></div><div>[This is off-topic for the NSD-users list and should move to the unbound-users list :-) ]<br></div><div><br></div><br><div><blockquote type="cite"><div bgcolor="#FFFFFF" text="#000000"><blockquote cite="mid:96B972C6-F766-4B0D-A7F1-97FF89941766@NLnetLabs.nl" type="cite">
<div apple-content-edited="true"><br>
</div>
<div apple-content-edited="true">The type of monitoring that
should always be taken place on open recursive nameservers is
monitoring for being used as DOS amplification vector. <br>
</div>
</blockquote>
<br>
What do you mean by this? What kind of parameters should be
monitored? Queries per second from a given IP address is my first
guess. <br>
<br>
</div>
</blockquote><br></div><div>Yes, that is a good first order approximation. A significant amount of queries that are likely to amplify are good hints too (apex ANY +dnssec), but those are of the necessary but not sufficient category. And I actually do not have a comprehensive description of what needs happening.</div><div><br></div><div>Besides saying "Just don't run an open resolver" <a href="http://tools.ietf.org/html/draft-ietf-dnsop-reflectors-are-evil-06">http://tools.ietf.org/html/draft-ietf-dnsop-reflectors-are-evil-06</a> doesn't say much about the topic.</div><div><br></div><div>Any other reader have hints? </div><div><br></div><div apple-content-edited="true"><span class="Apple-style-span" style="font-family: Helvetica; font-size: 12px; "><br class="Apple-interchange-newline"><table cellspacing="0" cellpadding="0" style="background-color: rgb(255, 255, 255); border-collapse: collapse; "><tbody><tr><td rowspan="2" valign="top" style="width: 97.8px; height: 56.3px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-width: 1px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-color: rgb(180, 180, 180); border-right-color: transparent; border-bottom-color: transparent; border-left-color: transparent; padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; text-align: right; font: normal normal normal 19px/normal 'Gill Sans'; "><font class="Apple-style-span" color="#777777"><span style="letter-spacing: 0px; "><b>NLnet<br></b></span><span style="font: normal normal normal 24px/normal 'Gill Sans'; letter-spacing: 0px; ">Labs</span></font></div></td><td valign="top" style="width: 114.5px; height: 18.1px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-width: 1px; border-right-width: 0px; border-bottom-width: 1px; border-left-width: 0px; border-top-color: rgb(180, 180, 180); border-right-color: transparent; border-bottom-color: rgb(202, 202, 202); border-left-color: transparent; padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; "><span style="letter-spacing: 0px; "><font class="Apple-style-span" color="#777777">Olaf M. Kolkman</font></span></div></td><td valign="top" style="width: 2.3px; height: 18.1px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-width: 1px; border-right-width: 0px; border-bottom-width: 1px; border-left-width: 0px; border-top-color: rgb(180, 180, 180); border-right-color: transparent; border-bottom-color: rgb(202, 202, 202); border-left-color: transparent; padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; min-height: 14px; "><font class="Apple-style-span" color="#777777"><br></font></div></td></tr><tr><td valign="top" style="width: 114.5px; height: 27.2px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-width: 1px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-color: rgb(202, 202, 202); border-right-color: transparent; border-bottom-color: transparent; border-left-color: transparent; padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 9px/normal Helvetica; "><span style="text-decoration: underline; letter-spacing: 0px; "><a href="http://www.NLnetLabs.nl"><font class="Apple-style-span" color="#777777">www.NLnetLabs.nl</font></a></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 9px/normal Helvetica; "><span style="text-decoration: underline; letter-spacing: 0px; "><a href="mailto:olaf@NLnetLabs.nl"><font class="Apple-style-span" color="#777777">olaf@NLnetLabs.nl</font></a></span></div></td><td valign="top" style="width: 2.3px; height: 27.2px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-width: 1px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-color: rgb(202, 202, 202); border-right-color: transparent; border-bottom-color: transparent; border-left-color: transparent; padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; min-height: 14px; "><font class="Apple-style-span" color="#777777"><br></font></div></td></tr><tr><td colspan="3" valign="top" style="width: 234.6px; height: 13.2px; padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 9px/normal Helvetica; "><span style="letter-spacing: 0px; "><font class="Apple-style-span" color="#777777">Science Park 400, 1098 XH Amsterdam, The Netherlands</font></span></div></td></tr></tbody></table><div style="color: rgb(158, 158, 158); margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; min-height: 14px; "><br></div></span><br class="Apple-interchange-newline">
</div>
<br></body></html>