Fwd: Fwd: disabling Any requests

2012-07-18 Thread Dns Administrator
message -- From: wbr...@e1b.org Date: Fri, Jul 13, 2012 at 2:55 PM Subject: Re: Fwd: disabling Any requests To: Dns Administrator dnsadm...@gmail.com Peter wrote on 07/13/2012 04:26:55 AM: ps I haven't stumbled across any coax cabling since the last millenium Wirecutters work on twisted

Fwd: disabling Any requests

2012-07-13 Thread Dns Administrator
Regards Peter ps I haven't stumbled across any coax cabling since the last millenium -- Forwarded message -- From: Chuck Swiger cswi...@mac.com Date: Thu, Jul 12, 2012 at 6:15 PM Subject: Re: disabling Any requests To: Lightner, Jeff jlight...@water.com Cc: bind-users@lists.isc.org bind

Re: disabling Any requests

2012-07-13 Thread Stephane Bortzmeyer
On Fri, Jul 13, 2012 at 10:26:55AM +0200, Dns Administrator dnsadm...@gmail.com wrote a message of 186 lines which said: Googling the issue I found that it was well known and had something to do with dns amplification and denial of service. Yes. Already discussed a lot on this list and on

Re: disabling Any requests

2012-07-12 Thread Chuck Swiger
On Jul 12, 2012, at 2:27 AM, Dns Administrator wrote: Hi bind-users, please excuse my ignorance being a novice to dns, but is there some way of disabling or choking Any type requests? Sure-- a firewall or even taking a pair of wire-cutters to the ethernet cable will accomplish that. :-)

Re: disabling Any requests

2012-07-12 Thread Phil Mayers
On 12/07/12 14:38, Chuck Swiger wrote: On Jul 12, 2012, at 2:27 AM, Dns Administrator wrote: Hi bind-users, please excuse my ignorance being a novice to dns, but is there some way of disabling or choking Any type requests? This has been discussed on the list recently - see the archives.

RE: disabling Any requests

2012-07-12 Thread Lightner, Jeff
] On Behalf Of Chuck Swiger Sent: Thursday, July 12, 2012 9:39 AM To: Dns Administrator Cc: bind-users@lists.isc.org Subject: Re: disabling Any requests On Jul 12, 2012, at 2:27 AM, Dns Administrator wrote: Hi bind-users, please excuse my ignorance being a novice to dns, but is there some way

Re: disabling Any requests

2012-07-12 Thread Phil Mayers
On 12/07/12 15:16, Lightner, Jeff wrote: Personally I don't know why dig -t any would be a problem. It's not exactly the same as doing an axfr transfer of the zone - it still only gets limited information. They're the current query type du jour for DDoS amplification attacks, which I

Re: disabling Any requests

2012-07-12 Thread sthaug
Personally I don't know why dig -t any would be a problem. It's not exactly the same as doing an axfr transfer of the zone - it still only gets limited information. They're the current query type du jour for DDoS amplification attacks, which I assume the OP is experiencing. The

Re: disabling Any requests

2012-07-12 Thread Phil Mayers
On 12/07/12 16:48, sth...@nethelp.no wrote: Personally I don't know why dig -t any would be a problem. It's not exactly the same as doing an axfr transfer of the zone - it still only gets limited information. They're the current query type du jour for DDoS amplification attacks, which I

Re: disabling Any requests

2012-07-12 Thread Chuck Swiger
On Jul 12, 2012, at 7:16 AM, Lightner, Jeff wrote: Your answer was clearly meant to be tongue in cheek but I'm not sure you understood. Please allow me to reassure you that I understood the intent of the question. :-) The point was that if one isn't clear about what one should allow and