I'm confused. I was working on a clients Server 2008 DNS today and removed the dns forwarders so dns would use the root hints instead, and recursion (to external, web dns queries) stopped working ...
Attackers can use a newly disclosed domain name server (DNS) vulnerability publicly known as TsuNAME as an amplification vector in large-scale reflection-based distributed denial of service (DDoS) ...