|
|
BugTraq
RE: recursive DNS servers DDoS as a growing DDoS problem Mar 30 2006 09:08PM Geo. (geoincidents nls net) (2 replies) RE: recursive DNS servers DDoS as a growing DDoS problem Apr 03 2006 05:05AM MÃ¥ns Nilsson (mansaxel sunet se) RE: recursive DNS servers DDoS as a growing DDoS problem Mar 31 2006 05:38PM gboyce (gboyce badbelly com) (3 replies) Re: recursive DNS servers DDoS as a growing DDoS problem Apr 02 2006 07:40AM Anton Ivanov (arivanov sigsegv cx) (1 replies) Re: recursive DNS servers DDoS as a growing DDoS problem Apr 04 2006 02:54AM Tim (tim-security sentinelchicken org) (1 replies) Re: recursive DNS servers DDoS as a growing DDoS problem Apr 05 2006 05:13AM Ross Wheeler (rossw albury net au) RE: recursive DNS servers DDoS as a growing DDoS problem Mar 31 2006 06:27PM Geo. (geoincidents nls net) (1 replies) Re: recursive DNS servers DDoS as a growing DDoS problem Apr 03 2006 11:12PM Jim Pingle (jim hpcisp com) (1 replies) Re: recursive DNS servers DDoS as a growing DDoS problem Apr 05 2006 06:11AM Erwan David (Erwan David trusted-logic fr) |
|
Privacy Statement |
>
> I haven't heard anyone talk about requiring that users use their ISP's
> DNS server. Just that they should not be able to use any random DNS
> server on the internet.
>
> What is stopping you from running your own local DNS server? My
> system at home runs named in a configuration that allows any systems
> on my local network to query from it. That's what I use as my
> authoritative nameserver.
>
> --
> Greg
>
People tend to forget that authoritative nameservers can also be used if
you know what zone to query for. How about sending spoofed packets to
ns1.msft.net asking for microsoft.com?
Amplification attacks can be performed on any UDP service that responds
with a reply packet larger than the initial query packet.
All DNS servers are at risk, some servers will produce lower
amplification factors than others.
Simon
[ reply ]