Skip to Content.
Sympa Menu

discuss - Re: [opennic-discuss] DDOS, open resolvers, how to solve?

discuss AT lists.opennicproject.org

Subject: Discuss mailing list

List archive

Re: [opennic-discuss] DDOS, open resolvers, how to solve?


Chronological Thread 
  • From: <wood.quinn.s AT gmail.com>
  • To: discuss AT lists.opennicproject.org
  • Subject: Re: [opennic-discuss] DDOS, open resolvers, how to solve?
  • Date: Wed, 30 Oct 2013 02:41:27 -0500

# cat /etc/bind/named.conf
[...]

include "/var/named/shared_userlist.conf";

# cat /var/named/shared_userlst.conf
acl registered-ips {
1.2.3.4;
5.6.7.8/30;
9.10.11.12/29;
}

#

The list could be generated from IP addresses set in a user panel at
www.opennic.glue and then mirrored to resolvers. At times there has been
expressed interest a type of SSO from there. This would be a step towards
enabling that. Shared domain registration, mailing lists subscriptions,
voting, and this kind of "Register IPs here you wish to access OpenNIC
nameservers from:" setting.

Obviously there is a privacy concern because at this point IP addresses and
usernames are logged at www.opennic.glue, but the nice thing is that they
aren't tied together on other resolvers. So it's a single focus point to fix
the privacy concerns. Just throwing out one idea, the user panel's list of IPs
on someone's account could be encrypted using a password so only they see them
(and the operator of the ACL generation service only sees the aggregate list.)



Archive powered by MHonArc 2.6.19.

Top of Page