[Dnsmasq-discuss] dnsmasq and NXNSAttack

Geert Stappers stappers at stappers.nl
Thu May 21 07:12:46 BST 2020


On Wed, May 20, 2020 at 07:26:22PM -0400, Neal P. Murphy wrote:
> Is dnsmasq vulnerable to NXNSAttack?
 
Text from http://www.nxnsattack.com/

  The NXNSAttack is more effective than the NXDomain attack: i) It
  reaches an amplification factor of more than 1620x on the number of
  packets exchanged by the recursive resolver. ii) Besides the negative
  cache, the attack also saturates the ’NS’ resolver caches.


Regards
Geert Stappers
-- 
Silence is hard to parse



More information about the Dnsmasq-discuss mailing list