knadh / dns.toys

A DNS server that offers useful utilities and services over the DNS protocol. Weather, world time, unit conversion etc.
https://www.dns.toys
MIT License
2.48k stars 135 forks source link

Long responses may be a security issue #42

Open bortzmeyer opened 1 year ago

bortzmeyer commented 1 year ago

Since some responses (for instance weather or dictionary) are way larger than the queries, and since dns.toys accepts requests over UDP, it may be used for reflection attacks with amplification. I don't think it is currently a deadly risk for the Internet :-) but may be some rate-limiter would be a good idea.