RE: DNS hits

2017-02-13 Thread Bonno Bloksma
Hi Glenn, >> Actually the current Bind in stable is just a blessing in this respect. >> It - by default- just allows recursion for localnet, localhost. > > This server is still Wheezy. The virtual websites didn't work on Jessie > Apache (I have no idea why yet). > >> So if you don't mess with it

Re: DNS hits

2017-02-12 Thread Glenn English
> On Sat, Feb 11, 2017 at 2:07 PM, Henning Follmann < hfollm...@itcfollmann.com > wrote Actually the current Bind in stable is just a blessing in this respect. > It -by default- just allows recursion for localnet, localhost. > This server is still Wheezy. The virtual websites didn't work on Jess

Re: DNS hits

2017-02-12 Thread Henning Follmann
On Sat, Feb 11, 2017 at 04:11:13PM -0700, Glenn English wrote: > On Sat, Feb 11, 2017 at 2:07 PM, Henning Follmann > wrote: > > > On Sat, Feb 11, 2017 at 10:58:54AM -0700, Glenn English wrote: > > > [...] > Does your DNS answer recursive queries? > > > > Oh, my lord. I didn't think it did -- I

Re: DNS hits

2017-02-12 Thread Eduardo M KALINOWSKI
On 11-02-2017 21:11, Glenn English wrote: > > On Sat, Feb 11, 2017 at 2:07 PM, Henning Follmann > mailto:hfollm...@itcfollmann.com>> wrote: > > Does your DNS answer recursive queries? > > > Oh, my lord. I didn't think it did -- I tried to configure BIND to do > recursion only from my net. I jus

Re: DNS hits

2017-02-11 Thread Glenn English
Sorry, Andy. Here's another try, but to the list... On Sat, Feb 11, 2017 at 8:40 PM, Glenn English wrote: > > > On Sat, Feb 11, 2017 at 6:33 PM, Andy Smith wrote: > > If your nameserver offered recursion then it was most likely scanned >> and added to a list of such servers, and is now being u

Re: DNS hits

2017-02-11 Thread Andy Smith
Hi Glenn, On Sat, Feb 11, 2017 at 04:11:13PM -0700, Glenn English wrote: > Does your DNS answer recursive queries? > > > > Oh, my lord. I didn't think it did -- I tried to configure BIND to do > recursion only from my net. I just tried it from an external IP, and sure > enough, it gave me an addr

Re: DNS hits

2017-02-11 Thread Igor Cicimov
On 12 Feb 2017 4:59 am, "Glenn English" wrote: Is anyone else getting thousands of hits on DNS? I am, largely from Amazon's AWS. I've emailed Amazon's abuse (from whois), Amazon's customer support, and added all the IP nets to my packet filter. But AWS isn't the whole problem -- just the worst

Re: DNS hits

2017-02-11 Thread Glenn English
On Sat, Feb 11, 2017 at 2:07 PM, Henning Follmann wrote: > On Sat, Feb 11, 2017 at 10:58:54AM -0700, Glenn English wrote: > > Nothing about Debian. > No, but I've been a Debian user for several years, and the place I know to ask to get to competent advice and such, is this list. And the server i

Re: DNS hits

2017-02-11 Thread Henning Follmann
On Sat, Feb 11, 2017 at 10:58:54AM -0700, Glenn English wrote: Nothing about Debian. Anyway... > Is anyone else getting thousands of hits on DNS? Hits how?. Do you run a DNS server with openly available zones? > > I am, largely from Amazon's AWS. I've emailed Amazon's abuse (from whois), > Am

Re: DNS hits

2017-02-11 Thread Steve Kemp
On Sat Feb 11, 2017 at 10:58:54 -0700, Glenn English wrote: >Is anyone else getting thousands of hits on DNS? Yes, but that's because I host DNS for popular domains. >But AWS isn't the whole problem -- just the worst offender. And my little >T1 has been, sometimes, DoS'ed by the hi