[zrail]

I was not running a recursive DNS server, just an instance of tinydns for my own domains. A non-rescursive server can still be used for reflection attacks (as I witnessed), it just doesn't do much if any amplification.