0

I recently started to host my own domains on my servers. I can already see a fair bit of bogus queries arriving to my servers. Some dns amplification attacks, etc. What can I do in order to further improve the safety of my dns servers?

1
  • 2
    Disabling recursion would be one step to take.
    – joeqwerty
    Apr 23, 2014 at 22:08

1 Answer 1

3

Assuming that this is an authoritative-only nameserver (the question makes it sound like that is the case), I would suggest the following:

  • Ensure that recursion is disabled or at least not allowed for the general public. (Allowing recursion will just attract unnecessary abuse.)

  • Enable response rate limiting. (Rate limiting the responses to "spammed" queries will make you less attractive as the reflector in an amplification attack.)

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .