Manual DNS settings note secure?

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Manual DNS settings note secure?

andynz

360 posts

Ultimate Geek
Inactive user

#196781 12-Jun-2016 14:25

Hi. I noticed some past posts about routers with default passwords having the DNS settings compromised so wondered:

1) If it is better to enter the DNS server addresses manually?

2) Is it better to use Google DNS instead of the Orcon IP's? Ie is it faster overall or less likely to Ddos attacks?

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1570508 12-Jun-2016 15:30

I'm not sure what posts you're referring to - a default password has nothing to do with DNS.

Many older routers are insecure and allow recursive DNS lookups from the WAN meaning your connection can be used as part of a DNS amplification attack. This has nothing do with passwords, it's either routers that don't have firewall settings allowing this to be disabled, or routers where people purposely disable it. I've seen a couple of posts over the years here on GZ from people who have purposely disabled all firewall settings and don't understand why this is bad.

You should ALWAYS use your ISP's DNS servers unless you understand why using 3rd party DNS will result in a degraded Internet experience. There are situations where 3rd party DNS is handy, but for 99% of people it should be avoided.

Your choice of DNS server has nothing do with with DDoS or DNS amplification attacks which are totally different.

andynz

360 posts

Ultimate Geek
Inactive user

#1570509 12-Jun-2016 15:35

Here was the post referring to the password and yes your right the firewall had been turned off.

Thanks for your reply and explanation.

http://m.geekzone.co.nz/Forums/82/Topic/179068