Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Bugtraq: Re: recursive DNS servers DDoS as a growing DDoS problem

Re: recursive DNS servers DDoS as a growing DDoS problem

From: Gadi Evron <ge_at_linuxbox.org>
Date: Wed, 05 Apr 2006 03:45:43 +0200

Geo. wrote:
>>>Really? Ok educate me, how do you do this with Windows 2000
>>>running MS dns?
>>>(telling people to use another server is not acceptable)
>
>
>>If Microsoft's products are broken, why souldn't I tell people to use
>>something else?
>
>
> You tell them whatever you like, they aren't going to switch just like they
> didn't switch from exchange just because it installed as an open relay. The
> whack-a-mole problem didn't go away with open relays until MS changed the
> default to disable relay and it's not going to go away with open recursive
> dns servers until they change the default there as well.
>
> Geo.

Geo, the default is bad. However, it is not a Microsoft issue, this is a
spoofing issue. Many like to bash Microsoft, some hate them. Myself I am
known as a Microsoft critic at times.

It is true Microsoft has recursion set on default, but so does bind.
That is how DNS is general is set all around the world. Hopefully the
very clued guys at both will change it.

Why are we arguing on the colour of bytes when we could be discussing
making trivial spoofing a thing of the past?

        Gadi.
Received on Apr 09 2006

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]