nanog mailing list archives

Re: Open Resolver Problems


From: Jay Ashworth <jra () baylink com>
Date: Mon, 25 Mar 2013 14:04:37 -0400 (EDT)

----- Original Message -----
From: "Jared Mauch" <jared () puck nether net>

Open resolvers pose a security threat.

Could you clarify, here, Jared?

Do "open DNS customer-resolver/recursive servers" *per se* cause a problem?

Or is it merely "customer zone servers which are misconfigured to recurse",
as has always been problematic?

That is: is this just a reminder we never closed the old hole, or 
notification of some new and much nastier hole?

Cheers,
-- jra
-- 
Jay R. Ashworth                  Baylink                       jra () baylink com
Designer                     The Things I Think                       RFC 2100
Ashworth & Associates     http://baylink.pitas.com         2000 Land Rover DII
St Petersburg FL USA               #natog                      +1 727 647 1274


Current thread: