<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><br></div><div><br></div>Dear NSD Users,<br> <br>Recently, specifically in TLD operator circles, there has been a lot of discussion on the use of authoritative servers for reflection attacks.<br> <br>We have been following these discussions with questions about the core-functionality of DNS, NSD's lean-mean-thus-secure architecture, and good neighbourship in mind. We considered an external and generic tool to deal with reflection but assessed that having a method to prevent reflection attacks within the name server is the best way to lower deployment hurdles. Therefore, we have decided to incorporate a technique to deal with reflection attacks in NSD.<br> <br>The technique is inspired on the work done by Vixie & Schryver [1] but will, because of biological diversity arguments, differ in some of its implementation details. Of course, it will be written from scratch by NLnet Labs. In the near future you may expect a blog-post on <a href="http://www.nlnetlabs.nl/blog/">http://www.nlnetlabs.nl/blog/</a> with a description of the design.<br> <br>We have prioritized this work and expect to have code available within a few months.<div><br>Thank you for using NSD.<br> <br>-- Olaf Kolkman<br><br><br>[1] <a href="http://ss.vix.com/~vixie/isc-tn-2012-1.txt">http://ss.vix.com/~vixie/isc-tn-2012-1.txt</a><br><br><br><div>
<span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px; "><span class="Apple-style-span" style="font-family: Helvetica; font-size: 12px; "><br class="Apple-interchange-newline"><table cellspacing="0" cellpadding="0" style="background-color: rgb(255, 255, 255); border-collapse: collapse; "><tbody><tr><td rowspan="2" valign="top" style="width: 97.8px; height: 56.3px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-width: 1px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-color: rgb(180, 180, 180); border-right-color: transparent; border-bottom-color: transparent; border-left-color: transparent; padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; text-align: right; font: normal normal normal 19px/normal 'Gill Sans'; "><font class="Apple-style-span" color="#777777"><span style="letter-spacing: 0px; "><b>NLnet<br></b></span><span style="font: normal normal normal 24px/normal 'Gill Sans'; letter-spacing: 0px; ">Labs</span></font></div></td><td valign="top" style="width: 114.5px; height: 18.1px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-width: 1px; border-right-width: 0px; border-bottom-width: 1px; border-left-width: 0px; border-top-color: rgb(180, 180, 180); border-right-color: transparent; border-bottom-color: rgb(202, 202, 202); border-left-color: transparent; padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; "><span style="letter-spacing: 0px; "><font class="Apple-style-span" color="#777777">Olaf M. Kolkman</font></span></div></td><td valign="top" style="width: 2.3px; height: 18.1px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-width: 1px; border-right-width: 0px; border-bottom-width: 1px; border-left-width: 0px; border-top-color: rgb(180, 180, 180); border-right-color: transparent; border-bottom-color: rgb(202, 202, 202); border-left-color: transparent; padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; min-height: 14px; "><font class="Apple-style-span" color="#777777"><br></font></div></td></tr><tr><td valign="top" style="width: 114.5px; height: 27.2px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-width: 1px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-color: rgb(202, 202, 202); border-right-color: transparent; border-bottom-color: transparent; border-left-color: transparent; padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 9px/normal Helvetica; "><span style="text-decoration: underline; letter-spacing: 0px; "><a href="http://www.NLnetLabs.nl"><font class="Apple-style-span" color="#777777">www.NLnetLabs.nl</font></a></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 9px/normal Helvetica; "><span style="text-decoration: underline; letter-spacing: 0px; "><a href="mailto:olaf@NLnetLabs.nl"><font class="Apple-style-span" color="#777777">olaf@NLnetLabs.nl</font></a></span></div></td><td valign="top" style="width: 2.3px; height: 27.2px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-width: 1px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-color: rgb(202, 202, 202); border-right-color: transparent; border-bottom-color: transparent; border-left-color: transparent; padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; min-height: 14px; "><font class="Apple-style-span" color="#777777"><br></font></div></td></tr><tr><td colspan="3" valign="top" style="width: 234.6px; height: 13.2px; padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 9px/normal Helvetica; "><span style="letter-spacing: 0px; "><font class="Apple-style-span" color="#777777">Science Park 400, 1098 XH Amsterdam, The Netherlands</font></span></div></td></tr></tbody></table><div style="color: rgb(158, 158, 158); margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; min-height: 14px; "><br></div></span></span><br class="Apple-interchange-newline">
</div>
<br></div></body></html>