Do You Know If Your DNS Server Can Be Used For DDoS Attacks?
ID: d1096926-719d-55d7-b205-af01a6c137f2
STIX ID: report--d1096926-719d-55d7-b205-af01a6c137f2
Feed Name: Black Hills Infosec Blog
This post explains how improperly configured (open) DNS resolvers enable DNS amplification DDoS attacks, demonstrates amplification with dig (notably via ANY queries), and provides practical mitigation steps: disable unnecessary recursion, restrict query types, implement response rate limiting, and allow queries only from trusted sources.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.