Re: Open Resolver Problems

[Harry Hoffman <hhoffman () ip-solutions net>]

What are those who provide open resolvers, such as google, doing to
combat the problem?

It would be nice to be able to provide open resolvers as a service and
combat the various threats associated with them.


Cheers,
Harry

On 03/25/2013 10:22 AM, Jared Mauch wrote:
> All,
>
> Open resolvers pose a security threat.  I wanted to let everyone know about a search tool that can help you find the 
> ones within your organization. Treat it like a big "BETA" stamp is across it, but please try it out and see if you 
> can close down any hosts within your network.
>
> This threat is larger than the SMURF amplification attacks in the past and can result in some quite large attacks.  
> I've seen this spilling out into other mailing lists (e.g.: juniper-nap and others).
>
> Please send feedback about links that should be included or documentation and spelling errors to me.
>
> openresolverproject.org
>
> Some basic stats:
>
> 27 million resolvers existed as of this dataset collection
>
> only 2.1 million of them were "closed".
>
> We have a lot to do to close the hosts, please do what you can to help.
>
> Thanks,
>
> - Jared