[SHAME] Spam Rats

John R. Levine johnl at iecc.com
Thu Jan 10 06:08:03 UTC 2013


>> One is a stunt rDNS server that synthesizes the records on demand.
>> (Bonus points for doing DNSSEC, too. Double bonus points for doing
>> NSEC3.)
>
> NSEC3 is a waste of time in ip6.arpa or any similarly structured
> zone so -1000000 for doing NEC3 and effectively doing a DoS attack
> against yourself and the client resolvers.

I know, but figuring out on the fly what order the hashes are would 
be quite a coding feat.

R's,
John



More information about the NANOG mailing list