Hi Mike, great article. The new DDoS, the DNS Amplification attack crazy effective at the moment and it shouldn't be. Like you mentioned, configured correctly, your server shouldn't be an open resolver. As servers are configured correctly, the effectiveness of this attack will be diminished.