GitHub user NuxRo opened a pull request:
https://github.com/apache/cloudstack/pull/1653
Prevent DNS reflection attacks
At least in SG zones DNS on the VR is publicly accessible and as such
susceptible to DNS amplification/reflection attacks. This fixes it as per
https://issues.apache.org/jira/browse/CLOUDSTACK-6432
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/NuxRo/cloudstack patch-4
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/cloudstack/pull/1653.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #1653
----
commit 67dec778db306386f0f78c017f055c19b3670849
Author: NuxRo <[email protected]>
Date: 2016-08-22T09:31:41Z
Prevent DNS reflection attacks
At least in SG zones DNS on the VR is publicly accessible and as such
susceptible to DNS amplification/reflection attacks. This fixes it as per
https://issues.apache.org/jira/browse/CLOUDSTACK-6432
----
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
