do you use SPF TXT RRs? (RFC4408)
Greg.Whynott at oicr.on.ca
Mon Oct 4 13:54:15 CDT 2010
i think it was an observation they made, and suggestions to make things better. I don't think the message was "fix this or you'll be off the air one day.".
if they have a 56k port speed(stuck in the 80's), there is potential there for a DoS from a large volume of spam back splatter.. 8)
over all, I'm inclined to accept your assumptions.
On Oct 4, 2010, at 2:38 PM, Suresh Ramasubramanian wrote:
> On Mon, Oct 4, 2010 at 12:47 PM, Greg Whynott <Greg.Whynott at oicr.on.ca> wrote:
>> A partner had a security audit done on their site. The report said they were at risk of a DoS due to the fact they didn't have a SPF record.
> This is pure unadulterated BS from someone who doesnt understand
> either DDOS mitigation, or SPF .. or more likely both.
> Suresh Ramasubramanian (ops.lists at gmail.com)
More information about the NANOG