Discuss mailing list

[Stefan Sabolowitsch <Stefan.Sabolowitsch AT felten-group.com>]

Hi all, 

I can not say that it is quiet / silent for me.

On all three DNS Servers, i've been constantly DNS attacks for about 4 weeks and this with 1 -2 k requests per second

really small example:

03/28/2013-06:13:39.134900 [Drop] [**] [1:2016016:6] ET CURRENT_EVENTS DNS Amplification Attack Inbound [**] [Classification: Potentially Bad Traffic] [Priority: 2] {UDP} 178.32.81.230:47706 -> 192.168.100.160:53

But help me out here DNS Dampening and an pro active IPS System.

regards

Stefan 

Am 28.03.2013 um 05:18 schrieb Jeff Taylor <shdwdrgn AT sourpuss.net>:

Same here... I took a glance at my own servers, but didn't see any unusual queries.  Glad to see that for once we're not being subjected to someone else's childish tantrum.


On 03/27/2013 12:27 PM, Steven Coutts wrote:
> Had a check earlier, I haven't seen anything either.
>
>
> Regards
>
> Kenny Taylor <kennytaylor AT runbox.com> wrote:
>

Have anyone's OpenNIC nameservers been disrupted in today's epic battle between Spamhaus and Cyberbunker?  I saw something about DNS reflection being used.  All quiet here..

>>
>>
>>
>> --------
>> You are a member of the OpenNIC Discuss list.
>> You may unsubscribe by emailing discuss-unsubscribe AT lists.opennicproject.org
>
>
> --------
> You are a member of the OpenNIC Discuss list.
> You may unsubscribe by emailing discuss-unsubscribe AT lists.opennicproject.org