Orcon DNS

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Orcon DNS

1 | 2 | 3 | 4

677 posts

Ultimate Geek

Trusted

#897258 17-Sep-2013 22:11

gehenna: Thanks, it's back for me now.

Got any leads on who is targeting you?

Some, but it shifts around and its quite distributed.

meat popsicle

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Note that to use Quic Broadband you must be comfortable with configuring your own router.

Zeon

3912 posts

Uber Geek

Trusted

#897259 17-Sep-2013 22:13

Can't you just block your recursive nameservers from being accessed externally? Some kind of firewall even (not Bizo :p ).

Speedtest 2019-10-14

ptinson

677 posts

Ultimate Geek

Trusted

#897278 17-Sep-2013 23:35

Zeon: Can't you just block your recursive nameservers from being accessed externally? Some kind of firewall even (not Bizo :p ).

We do.
These name servers are only open to our ranges and a handful of ... pre existing rubbish.
They are not open resolvers, but they are open to all of our broadband subscribers...

Paul

meat popsicle

Zeon

3912 posts

Uber Geek

Trusted

#897279 17-Sep-2013 23:36

ptinson:
Zeon: Can't you just block your recursive nameservers from being accessed externally? Some kind of firewall even (not Bizo :p ).

We do.
These name servers are only open to our ranges and a handful of ... pre existing rubbish.
They are not open resolvers, but they are open to all of our broadband subscribers...

Paul

Oh so the DoS is occurring from your own customers? Sorry little confused.

Speedtest 2019-10-14

ptinson

677 posts

Ultimate Geek

Trusted

#897282 17-Sep-2013 23:50

Zeon:
ptinson:
Zeon: Can't you just block your recursive nameservers from being accessed externally? Some kind of firewall even (not Bizo :p ).

We do.
These name servers are only open to our ranges and a handful of ... pre existing rubbish.
They are not open resolvers, but they are open to all of our broadband subscribers...

Paul

Oh so the DoS is occurring from your own customers? Sorry little confused.

Its a mix. A number of our IP ranges, not entirely our direct customers as we also wholesale.
As well as syn attacks from china, being dropped on the firewall.

The query attacks morph, they are swapping domain, record type, protocol and DNS flags so its all quite dynamic...

Paul

meat popsicle

FireEngine

1223 posts

Uber Geek

Trusted

#897283 17-Sep-2013 23:50

Zeon:
ptinson:
Zeon: Can't you just block your recursive nameservers from being accessed externally? Some kind of firewall even (not Bizo :p ).

We do.
These name servers are only open to our ranges and a handful of ... pre existing rubbish.
They are not open resolvers, but they are open to all of our broadband subscribers...

Paul

Oh so the DoS is occurring from your own customers? Sorry little confused.

Spoofed to appear to be from our ip ranges. It is a sophisticated attack.

Regards FireEngine

Zeon

3912 posts

Uber Geek

Trusted

#897285 18-Sep-2013 00:15

Ah guts, good luck guys!

I've been thinking about a solution to internet crime that can't go punished e.g. originating from Nigeria, China etc. - perhaps create a crack team who can track down the perps and then hire local gangs to beat them up?

Speedtest 2019-10-14

ptinson

677 posts

Ultimate Geek

Trusted

#897288 18-Sep-2013 00:44

Zeon: Ah guts, good luck guys!

I've been thinking about a solution to internet crime that can't go punished e.g. originating from Nigeria, China etc. - perhaps create a crack team who can track down the perps and then hire local gangs to beat them up?

This is also the solution to Spam, sadly hiring killers to take out these wonderful people is still illegal.

meat popsicle

LoJac

17 posts

Geek

#902783 26-Sep-2013 06:45

Orcon issues again this morning? Change DNS server to 8:8:8:8 and good to go.

ptinson

677 posts

Ultimate Geek

Trusted

#902786 26-Sep-2013 06:55

LoJac: Orcon issues again this morning? Change DNS server to 8:8:8:8 and good to go.

I don't see any issues this morning.
DNS traffic looks normal and sitting steady.

I am using it at home and have no issues.

Which Orcon addresses where you using?

meat popsicle

Sounddude

I fix stuff!
1926 posts

Uber Geek

Trusted

2degrees

Lifetime subscriber

#902818 26-Sep-2013 08:03

LoJac: Orcon issues again this morning? Change DNS server to 8:8:8:8 and good to go.

we did some major bng changes last night which resulted in a planned outage. probably related.

LoJac

17 posts

Geek

#902823 26-Sep-2013 08:08

Had it on 'Obtain auto from ISP' as that usually works. Change to 8:8:8:8 and that worked now that doesn't work either.

LoJac

17 posts

Geek

#902842 26-Sep-2013 08:39

Sounddude:
LoJac: Orcon issues again this morning? Change DNS server to 8:8:8:8 and good to go.

we did some major bng changes last night which resulted in a planned outage. probably related.

So what do we have to change to connect again? Great communication as usual Orcon looking forward to my contract ending in a few months.

Sounddude

I fix stuff!
1926 posts

Uber Geek

Trusted

2degrees

Lifetime subscriber

#902846 26-Sep-2013 08:43

LoJac:

So what do we have to change to connect again? Great communication as usual Orcon looking forward to my contract ending in a few months.

no changes required, should be working for you.

LoJac

17 posts

Geek

#902860 26-Sep-2013 08:54

Sounddude:
LoJac:

So what do we have to change to connect again? Great communication as usual Orcon looking forward to my contract ending in a few months.

no changes required, should be working for you.

No it's not. Tried different DNS settings that have fixed in the past but nothing fixing now. Been on hold to Orcon customer service for 36 mins.

1 | 2 | 3 | 4