peskey

this is great that this information is out there and people are now taking it seriously. I presented about this at APRICOT last month: http://www.apricot2013.net/__data/assets/pdf_file/0009/58878... Please all network operators! Clean up the open recursors in your network and implement BCP-38!

Authoritative DNS servers are used in attacks too, they are however a lot smaller scale. Querying one big zone across 10,000 recursive servers vs. querying the same big zone against 2 authoritative servers.