Re: Urgently patch your publicly available, recursive DNS server
>> The attacker uses the authoritative that it owns to craft a response to a resolver with a referral that contains n new and non-existent name-server names ..., gets a DDoS attack on either the resolver or on a corresponding authoritative server, with an amplification factor of O(F) packets ... .
Sounds like a Cunning Plan.
https://www.youtube.com/watch?v=fQk_832EAx4