Lately DDoS amplification method of attack became very popular due to simplicity of its deployment and potentially great attack power. If you own your DNS server for your clients good idea is to make it available only for them (acl trusted). This script allows you to detect and quickly inform you about any DNS attack