Running a DNSSec responder? Make sure it doesn't help the black hats

Systems can be roped into amplification attacks

Sysadmins are making mistakes configuring and managing DNSSec, and it's leaving systems that should be secure open to exploitation in DNS reflection attacks."