Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4
677 posts

Ultimate Geek
+1 received by user: 27

Trusted

  Reply # 897258 17-Sep-2013 22:11
Send private message

gehenna: Thanks, it's back for me now.

Got any leads on who is targeting you?


Some, but it shifts around and its quite distributed.





meat popsicle

3421 posts

Uber Geek
+1 received by user: 410

Trusted

  Reply # 897259 17-Sep-2013 22:13
Send private message

Can't you just block your recursive nameservers from being accessed externally? Some kind of firewall even (not Bizo :p ).





 
 
 
 


677 posts

Ultimate Geek
+1 received by user: 27

Trusted

  Reply # 897278 17-Sep-2013 23:35
Send private message

Zeon: Can't you just block your recursive nameservers from being accessed externally? Some kind of firewall even (not Bizo :p ).


We do.
These name servers are only open to our ranges and a handful of ... pre existing rubbish.
They are not open resolvers, but they are open to all of our broadband subscribers...

Paul




meat popsicle

3421 posts

Uber Geek
+1 received by user: 410

Trusted

  Reply # 897279 17-Sep-2013 23:36
Send private message

ptinson:
Zeon: Can't you just block your recursive nameservers from being accessed externally? Some kind of firewall even (not Bizo :p ).


We do.
These name servers are only open to our ranges and a handful of ... pre existing rubbish.
They are not open resolvers, but they are open to all of our broadband subscribers...

Paul


Oh so the DoS is occurring from your own customers? Sorry little confused.





677 posts

Ultimate Geek
+1 received by user: 27

Trusted

  Reply # 897282 17-Sep-2013 23:50
Send private message

Zeon:
ptinson:
Zeon: Can't you just block your recursive nameservers from being accessed externally? Some kind of firewall even (not Bizo :p ).


We do.
These name servers are only open to our ranges and a handful of ... pre existing rubbish.
They are not open resolvers, but they are open to all of our broadband subscribers...

Paul


Oh so the DoS is occurring from your own customers? Sorry little confused.


Its a mix. A number of our IP ranges, not entirely our direct customers as we also wholesale.
As well as syn attacks from china, being dropped on the firewall.

The query attacks morph, they are swapping domain, record type, protocol and DNS flags so its all quite dynamic...

Paul




meat popsicle

1213 posts

Uber Geek
+1 received by user: 231

Trusted

  Reply # 897283 17-Sep-2013 23:50
Send private message

Zeon:
ptinson:
Zeon: Can't you just block your recursive nameservers from being accessed externally? Some kind of firewall even (not Bizo :p ).


We do.
These name servers are only open to our ranges and a handful of ... pre existing rubbish.
They are not open resolvers, but they are open to all of our broadband subscribers...

Paul


Oh so the DoS is occurring from your own customers? Sorry little confused.


Spoofed to appear to be from our ip ranges. It is a sophisticated attack.




Regards FireEngine


3421 posts

Uber Geek
+1 received by user: 410

Trusted

  Reply # 897285 18-Sep-2013 00:15
Send private message

Ah guts, good luck guys!

I've been thinking about a solution to internet crime that can't go punished e.g. originating from Nigeria, China etc. - perhaps create a crack team who can track down the perps and then hire local gangs to beat them up?





677 posts

Ultimate Geek
+1 received by user: 27

Trusted

  Reply # 897288 18-Sep-2013 00:44
Send private message

Zeon: Ah guts, good luck guys!

I've been thinking about a solution to internet crime that can't go punished e.g. originating from Nigeria, China etc. - perhaps create a crack team who can track down the perps and then hire local gangs to beat them up?


This is also the solution to Spam, sadly hiring killers to take out these wonderful people is still illegal.




meat popsicle

17 posts

Geek


  Reply # 902783 26-Sep-2013 06:45
Send private message

Orcon issues again this morning? Change DNS server to 8:8:8:8 and good to go.

677 posts

Ultimate Geek
+1 received by user: 27

Trusted

  Reply # 902786 26-Sep-2013 06:55
Send private message

LoJac: Orcon issues again this morning? Change DNS server to 8:8:8:8 and good to go.


I don't see any issues this morning.
DNS traffic looks normal and sitting steady.

I am using it at home and have no issues.

Which Orcon addresses where you using?




meat popsicle

I fix stuff!
1711 posts

Uber Geek
+1 received by user: 381

Trusted
Vocus
Subscriber

  Reply # 902818 26-Sep-2013 08:03
Send private message

LoJac: Orcon issues again this morning? Change DNS server to 8:8:8:8 and good to go.


we did some major bng changes last night which resulted in a planned outage. probably related.



17 posts

Geek


  Reply # 902823 26-Sep-2013 08:08
Send private message

Had it on 'Obtain auto from ISP' as that usually works. Change to 8:8:8:8 and that worked now that doesn't work either.

17 posts

Geek


  Reply # 902842 26-Sep-2013 08:39
Send private message

Sounddude:
LoJac: Orcon issues again this morning? Change DNS server to 8:8:8:8 and good to go.


we did some major bng changes last night which resulted in a planned outage. probably related.




So what do we have to change to connect again? Great communication as usual Orcon looking forward to my contract ending in a few months.

I fix stuff!
1711 posts

Uber Geek
+1 received by user: 381

Trusted
Vocus
Subscriber

  Reply # 902846 26-Sep-2013 08:43
Send private message

LoJac:

So what do we have to change to connect again? Great communication as usual Orcon looking forward to my contract ending in a few months.


no changes required, should be working for you.


17 posts

Geek


  Reply # 902860 26-Sep-2013 08:54
Send private message

Sounddude:
LoJac:

So what do we have to change to connect again? Great communication as usual Orcon looking forward to my contract ending in a few months.


no changes required, should be working for you.



No it's not. Tried different DNS settings that have fixed in the past but nothing fixing now. Been on hold to Orcon customer service for 36 mins.

1 | 2 | 3 | 4
Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.