Mitigating DNS amplification attacks

2013-04-30 Thread Thomas St-Pierre
Hi! I was wondering if anyone had any experience with dealing with open resolvers as a web hoster? We currently have some 40,000 ip's that respond to DNS in our AS, the majority of which are not "open" but do reply with a referral to the root zones. We've been sending emails to our clients but

Re: Mitigating DNS amplification attacks

2013-04-30 Thread Thomas St-Pierre
Hi! On 13-04-30 7:57 PM, "Dobbins, Roland" wrote: > >On May 1, 2013, at 6:43 AM, Thomas St-Pierre wrote: > >> We've been sending emails to our clients but as the servers are not >>managed by us, there's not much we can do at that level. > >Sure,

Re: Mitigating DNS amplification attacks

2013-04-30 Thread Thomas St-Pierre
NANOG list mailto:nanog@nanog.org>> Subject: Re: Mitigating DNS amplification attacks On Tue, Apr 30, 2013 at 5:28 PM, Thomas St-Pierre mailto:tstpie...@iweb.com>> wrote: On 13-04-30 7:57 PM, "Dobbins, Roland" mailto:rdobb...@arbor.net>> wrote: >On May 1, 2013, at 6:43 AM

BGP instability?

2013-05-16 Thread Thomas St-Pierre
Hi, Did anyone else see a large amount of instability between around 12:20am and 3:10am? (UTC, May 17th) We saw around 9 million announces per hour during that period come in through all our upstreams (vs an average normal of around 128k per hour). Just curious as to what happened, if anything

Re: SNMP DDoS: the vulnerability you might not know you have

2013-07-31 Thread Thomas St-Pierre
The problem isn't the people on this list leaving the public snmp community on their devices, it's the vendors of home routers leaving it there in their devices. Normal end users don't know or even care what snmp is. (nor can we expect them too) A simple scan of a large cable/dsl ISP's address spa