https://freek.ws/2017/03/18/blocking-dns-amplification-attacks-using-iptables/
How does that work?
what about Neustar
Works amazingly well, I have a couple of the Nano Pi Neo devices, one for the production Pi-hole image and then a handful for development. Running Armbian on them and it just works. I do have my own upstreams on a few TinyKVMs but for access control and cleaning up traffic the Nano Pi are great. I’m looking forward to pushing the mutlicore processor on it with a threaded dnsmasq, so far no problems.
I haven’t heard of Neustar, what do they provide?