bugtraq - Re: recursive DNS servers DDoS as a growing DDoS problem

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 05 Apr 2006 03:45:43 +0200
From: Gadi Evron <ge@...uxbox.org>
To: "Geo." <geoincidents@....net>
Cc: bugtraq@...urityfocus.com
Subject: Re: recursive DNS servers DDoS as a growing DDoS problem

Geo. wrote:
>>>Really? Ok educate me, how do you do this with Windows 2000
>>>running MS dns?
>>>(telling people to use another server is not acceptable)
> 
> 
>>If Microsoft's products are broken, why souldn't I tell people to use
>>something else?
> 
> 
> You tell them whatever you like, they aren't going to switch just like they
> didn't switch from exchange just because it installed as an open relay. The
> whack-a-mole problem didn't go away with open relays until MS changed the
> default to disable relay and it's not going to go away with open recursive
> dns servers until they change the default there as well.
> 
> Geo.

Geo, the default is bad. However, it is not a Microsoft issue, this is a 
spoofing issue. Many like to bash Microsoft, some hate them. Myself I am 
known as a Microsoft critic at times.

It is true Microsoft has recursion set on default, but so does bind. 
That is how DNS is general is set all around the world. Hopefully the 
very clued guys at both will change it.

Why are we arguing on the colour of bytes when we could be discussing 
making trivial spoofing a thing of the past?

	Gadi.