3 ms·
I have run a totally open 'unbound' instance in my personal infrastructure for many years now. Anyone in the world can query it and get correct name resolution
by rsync 4y ago
I have run a totally open 'unbound' instance in my personal infrastructure for many years now.
Anyone in the world can query it and get correct name resolution (if they scanned for it and found it).
Convince me that this is negative ...
- deleted 4y ago[deleted]
- jabroni_salad 4y agoYou could be party to a dns amplification attack: https://www.cisa.gov/uscert/ncas/alerts/TA13-088A https://www.cisa.gov/uscert/ncas/alerts/TA13-088A & a quote from the article: >Our findings revealed that we can reduce the overall potential by 80% if we patch around 20% of the most potent amplifiers (see Figure 1).
- sliken 4y agoThis DNS likely participates in DoS attacks. Attackers craft queries with a maximum amplification factor and offer up the victim's IP as the query IP. This results in bandwidth from the attacker getting multiplied by amplification factor and the attackers IP is hidden from the victim. Rate limiting, blocking abusive IPs, and blocking large transfers like zone transfers can help.