alt Hacker NewsThat's just the braindeqd design of DNS, responding to arbitrary UDP packets without authenticating the IP address of the sender.
That's just the braindeqd design of DNS, responding to arbitrary UDP packets without authenticating the IP address of the sender.
Indeed. For what it's worth the spoofing aspect got better for a while then plateaued. [1] bcp84 / bcp38 adoption has pretty much stalled out. No idea what to do with the remaining ISP's.
[1] - https://spoofer.caida.org/summary.php