Vorsorge gegen DNS Amplification Attacks

DNS test coverage


  • DOMAIN NAMES -CONCEPTS AND FACILITIES - RFC 1035
  • DOMAIN NAMES -IMPLEMENTATION AND SPECIFICATIONRFC - RFC 1034
  • Requirements for Internet Hosts --Application and Support - RFC 1123
  • Incremental Zone Transfer in DNS - RFC 1995
  • A Mechanism for Prompt Notification of Zone Changes (DNS NOTIFY) - RFC 1996
  • Clarifications to the DNS Specification - RFC 2131
  • Negative Caching of DNS Queries (DNS NCACHE)RFC3425Obsoleting IQUERY - RFC 2308

Extension


  • Extension Mechanisms for DNS (EDNS0) - RFC 2782
  • A DNS RR for specifying the location of services (DNS SRV) - RFC 2671
  • Dynamic Delegation Discovery System (DDDS) Part One: TheComprehensive DDDS - RFC 3401
  • Dynamic Delegation Discovery System (DDDS) Part Two: TheAlgorithm - RFC 3402
  • Dynamic Delegation Discovery System (DDDS) Part Three: The Domain Name System (DNS) Database - RFC 3403
  • Dynamic Delegation Discovery System (DDDS) Part Four: The Uniform Resource Identifiers (URI) Resolution Application - RFC 3404
  • Dynamic Delegation Discovery System (DDDS) Part Five: URI.ARPA Assignment Procedures - RFC 3405
  • DNS Extensions to Support IP Version 6 - RFC 3596
  • Security Introduction and Requirements - RFC 4033
  • Resource Records for the DNS Security Extensions - RFC 4034
  • Protocol Modifications for the DNS Security Extensions - RFC 4035