[nsd-users] Amplification attack how to stop it

[Peter Larsen]

https://www.nlnetlabs.nl/blog/2012/10/11/nsd-ratelimit/ <https://www.nlnetlabs.nl/blog/2012/10/11/nsd-ratelimit/>


> On Dec 3, 2015, at 5:58 PM, Bas van den Dikkenberg <bas at Dikkenberg.net> wrote:
> 
> Hi all,
> 
> We have a big  problem  all 3 of our dns servers are under Amplification attack
> As soon as we start nsd we send out 50 mbit to the internet.
> Any ideas how can stop this .
> 
> 
> We run NSD version 4.1.2 (most recent in ondrej nlnetlabs ppa)
> 
> My nsd.conf can be found here: http://pastebin.com/kAHcRiVf <http://pastebin.com/kAHcRiVf>
> 
> suggestions are greatly appreciated
> _______________________________________________
> nsd-users mailing list
> nsd-users at NLnetLabs.nl <mailto:nsd-users at nlnetlabs.nl>
> http://open.nlnetlabs.nl/mailman/listinfo/nsd-users <http://open.nlnetlabs.nl/mailman/listinfo/nsd-users>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20151203/946bf72d/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20151203/946bf72d/attachment.bin>