Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4
677 posts

Ultimate Geek
+1 received by user: 27

Trusted

  Reply # 897258 17-Sep-2013 22:11
Send private message

gehenna: Thanks, it's back for me now.

Got any leads on who is targeting you?


Some, but it shifts around and its quite distributed.





meat popsicle

3445 posts

Uber Geek
+1 received by user: 441

Trusted

  Reply # 897259 17-Sep-2013 22:13
Send private message

Can't you just block your recursive nameservers from being accessed externally? Some kind of firewall even (not Bizo :p ).





 
 
 
 


677 posts

Ultimate Geek
+1 received by user: 27

Trusted

  Reply # 897278 17-Sep-2013 23:35
Send private message

Zeon: Can't you just block your recursive nameservers from being accessed externally? Some kind of firewall even (not Bizo :p ).


We do.
These name servers are only open to our ranges and a handful of ... pre existing rubbish.
They are not open resolvers, but they are open to all of our broadband subscribers...

Paul




meat popsicle

3445 posts

Uber Geek
+1 received by user: 441

Trusted

  Reply # 897279 17-Sep-2013 23:36
Send private message

ptinson:
Zeon: Can't you just block your recursive nameservers from being accessed externally? Some kind of firewall even (not Bizo :p ).


We do.
These name servers are only open to our ranges and a handful of ... pre existing rubbish.
They are not open resolvers, but they are open to all of our broadband subscribers...

Paul


Oh so the DoS is occurring from your own customers? Sorry little confused.





677 posts

Ultimate Geek
+1 received by user: 27

Trusted

  Reply # 897282 17-Sep-2013 23:50
Send private message

Zeon:
ptinson:
Zeon: Can't you just block your recursive nameservers from being accessed externally? Some kind of firewall even (not Bizo :p ).


We do.
These name servers are only open to our ranges and a handful of ... pre existing rubbish.
They are not open resolvers, but they are open to all of our broadband subscribers...

Paul


Oh so the DoS is occurring from your own customers? Sorry little confused.


Its a mix. A number of our IP ranges, not entirely our direct customers as we also wholesale.
As well as syn attacks from china, being dropped on the firewall.

The query attacks morph, they are swapping domain, record type, protocol and DNS flags so its all quite dynamic...

Paul




meat popsicle

1214 posts

Uber Geek
+1 received by user: 233

Trusted

  Reply # 897283 17-Sep-2013 23:50
Send private message

Zeon:
ptinson:
Zeon: Can't you just block your recursive nameservers from being accessed externally? Some kind of firewall even (not Bizo :p ).


We do.
These name servers are only open to our ranges and a handful of ... pre existing rubbish.
They are not open resolvers, but they are open to all of our broadband subscribers...

Paul


Oh so the DoS is occurring from your own customers? Sorry little confused.


Spoofed to appear to be from our ip ranges. It is a sophisticated attack.




Regards FireEngine


3445 posts

Uber Geek
+1 received by user: 441

Trusted

  Reply # 897285 18-Sep-2013 00:15
Send private message

Ah guts, good luck guys!

I've been thinking about a solution to internet crime that can't go punished e.g. originating from Nigeria, China etc. - perhaps create a crack team who can track down the perps and then hire local gangs to beat them up?





677 posts

Ultimate Geek
+1 received by user: 27

Trusted

  Reply # 897288 18-Sep-2013 00:44
Send private message

Zeon: Ah guts, good luck guys!

I've been thinking about a solution to internet crime that can't go punished e.g. originating from Nigeria, China etc. - perhaps create a crack team who can track down the perps and then hire local gangs to beat them up?


This is also the solution to Spam, sadly hiring killers to take out these wonderful people is still illegal.




meat popsicle

17 posts

Geek


  Reply # 902783 26-Sep-2013 06:45
Send private message

Orcon issues again this morning? Change DNS server to 8:8:8:8 and good to go.

677 posts

Ultimate Geek
+1 received by user: 27

Trusted

  Reply # 902786 26-Sep-2013 06:55
Send private message

LoJac: Orcon issues again this morning? Change DNS server to 8:8:8:8 and good to go.


I don't see any issues this morning.
DNS traffic looks normal and sitting steady.

I am using it at home and have no issues.

Which Orcon addresses where you using?




meat popsicle

I fix stuff!
1734 posts

Uber Geek
+1 received by user: 415

Trusted
Vocus
Subscriber

  Reply # 902818 26-Sep-2013 08:03
Send private message

LoJac: Orcon issues again this morning? Change DNS server to 8:8:8:8 and good to go.


we did some major bng changes last night which resulted in a planned outage. probably related.



17 posts

Geek


  Reply # 902823 26-Sep-2013 08:08
Send private message

Had it on 'Obtain auto from ISP' as that usually works. Change to 8:8:8:8 and that worked now that doesn't work either.

17 posts

Geek


  Reply # 902842 26-Sep-2013 08:39
Send private message

Sounddude:
LoJac: Orcon issues again this morning? Change DNS server to 8:8:8:8 and good to go.


we did some major bng changes last night which resulted in a planned outage. probably related.




So what do we have to change to connect again? Great communication as usual Orcon looking forward to my contract ending in a few months.

I fix stuff!
1734 posts

Uber Geek
+1 received by user: 415

Trusted
Vocus
Subscriber

  Reply # 902846 26-Sep-2013 08:43
Send private message

LoJac:

So what do we have to change to connect again? Great communication as usual Orcon looking forward to my contract ending in a few months.


no changes required, should be working for you.


17 posts

Geek


  Reply # 902860 26-Sep-2013 08:54
Send private message

Sounddude:
LoJac:

So what do we have to change to connect again? Great communication as usual Orcon looking forward to my contract ending in a few months.


no changes required, should be working for you.



No it's not. Tried different DNS settings that have fixed in the past but nothing fixing now. Been on hold to Orcon customer service for 36 mins.

1 | 2 | 3 | 4
Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic


Donate via Givealittle


Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Kordia announces recipient of inaugural Women in Technology Scholarship
Posted 26-Mar-2019 22:48


T&G Global and Abundant Robotics show first commercial robotic apple harvester
Posted 26-Mar-2019 21:34


Amazon introduces new Kindle with adjustable front light
Posted 21-Mar-2019 20:14


A call from the companies providing internet access for the great majority of New Zealanders, to the companies with the greatest influence over social media content
Posted 19-Mar-2019 15:21


Two e-scooter companies selected for Wellington trial
Posted 15-Mar-2019 17:33


GeForce GTX 1660 available now
Posted 15-Mar-2019 08:47


Artificial Intelligence to double the rate of innovation in New Zealand by 2021
Posted 13-Mar-2019 14:47


LG demonstrates smart home concepts at LG InnoFest
Posted 13-Mar-2019 14:45


New Zealanders buying more expensive smartphones
Posted 11-Mar-2019 09:52


2degrees Offers Amazon Prime Video to Broadband Customers
Posted 8-Mar-2019 14:10


D-Link ANZ launches D-Fend AC2600 Wi-Fi Router Protected by McAfee
Posted 7-Mar-2019 11:09


Slingshot commissions celebrities to design new modems
Posted 5-Mar-2019 08:58


Symantec Annual Threat Report reveals more ambitious, destructive and stealthy attacks
Posted 28-Feb-2019 10:14


FUJIFILM launches high performing X-T30
Posted 28-Feb-2019 09:40


Netflix is killing content piracy says research
Posted 28-Feb-2019 09:33



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.