[vengefulduck]

DNS servers can be used in an DOS amplification attack by sending requests with spoofed ip addresses. So if you don’t take measures to prevent this it’s likely your server will be used in DOS attacks.

https://us-cert.cisa.gov/ncas/alerts/TA13-088A