Skip to content
ATIS Best Practices
fXin▶
Login

Best Practice Detail

13-12-8528

Network Operators, Service Providers and Public Safety should consider one or more of the following steps if the DNS server is under attack, 1) Implement reactive filtering to discard identified attack traffic, if possible, 2) Rate-limiting traffic to the DNS server complex, 3) Deploy suitable Intrusion Prevention System in front of DNS servers, 4) Deploy additional DNS server capacity in a round-robin architecture, 5) Utilize DoS/DDoS tracking methods to identify the source(s) of the attack, or 6) Move name resolution service to a 3rd party provider. This applies to Public Safety only in an NG9-1-1 environment.

Status: Rollover New

References/Comments: RFC-2870, ISO/IEC 15408, ISO 17799 US-CERT \"Securing an Internet Name Server\".

Historical events:

  • Network Operators
  • Service Providers
  • Public Safety
  • Cable
  • Internet/Data
  • Satellite
  • Wireless
  • Wireline
  • Cyber Security
  • Disaster Recovery
  • Emergency Preparedness
  • Public Safety Service
  • CSRIC VII: Rollover New In CSRIC VII