discuss AT lists.opennicproject.org
Subject: Discuss mailing list
List archive
- From: "oVPN.to Support" <support AT ovpn.to>
- To: discuss AT lists.opennicproject.org
- Subject: [opennic-discuss] block new dns-amp. attack domain
- Date: Thu, 17 Jul 2014 14:28:14 +0000
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
check your queries for "ANY"-type requests to webpanel.sk!
if you have them, drop it with iptables, or your server is part of
dns-amp attack. you should not see more queries when iptables added.
iptables --insert INPUT -p udp --dport 53 -m string --from 20 --to 40
- --algo bm --hex-string
'|0877656270616e656c02736b0000ff00010000292328|' -j DROP -m comment
- --comment "webpanel.sk"
-----BEGIN PGP SIGNATURE-----
iQEcBAEBCgAGBQJTx91+AAoJEEj9Y1FwqgyOO6gIANcikvtBauxP+SgDN8WRQP2i
i9CX7zRaEXEqvjb4sWdSyYzMJE1RZL3QGRltpCN3cKRrB1+pjxQ9HAojAA+hk1wN
DNE+CsWCurAWvJA34G5FMYqMB9vq23CXBHOT7v+XIq25bM8rycKfq65ZFO7cK5bu
SExhNPEeiFKGTwi+QBbFKyJ5DQdrYNxHOeTteAPfxZaRYD9KH2E4gqdFi3plBlbn
k8NiMgmjpOE1nMUG9U+4fBU0mmn4KprGGp7D1uRy2+pYhcL3X4GgzRu1bqw1O9CN
Sf8NMiRHLukDYZpkgMFNXgWw3jvh7IjFII4rAYc8c8uwK6ycewcO+ERXXe0UpdQ=
=F0u3
-----END PGP SIGNATURE-----
- [opennic-discuss] block new dns-amp. attack domain, oVPN.to Support, 07/17/2014
- Re: [opennic-discuss] block new dns-amp. attack domain, Kevin Holly (Fusl), 07/21/2014
Archive powered by MHonArc 2.6.19.