Last Rogue Registrar Standing - Fighting against Fast Flux

The trouble with new security rules or practices is that they’re mostly aimed at cracking down on abusers, but only the good guys follow them. That’s the quandary with stamping out DNS abuse by the more sophisticated bot herders who use fast-flux and double-flux technology to evade detection.

ICANN’s new recommendations and best practices for Internet domain registrars, ISPs, users, and other members of the Internet community is an effort to derail fast-flux botnets. Among the recommendations are that registrars authenticate any requests for changing name server configurations, and that they set a minimum “time to live” threshold of 30 minutes for a server to prevent those lightning-fast swap-outs that make fast-flux botnets so hard to kill.