基于伪造源地址的DNS攻击的解决办法

The Solution to the DNS Attack Based on the Forged Source Address

针对校园网出现的利用仿冒源地址对DNS进行攻击,从而影响DNS正常运行的情况,通过在网络设备和出口防火墙分别配置ACL和访问控制策略来阻断这种类型的攻击,来保证校园网正常运行。

By using fake source address to attack DNS has affected the normal operation of the DNS on the campus network. Through to configure ACL and access control strategy in the network equipments and firewalls to block this type of attack, to ensure the normal operation of the campus network.