Gentoo Archives: gentoo-user

From: William Kenworthy <billk@×××××××××.au>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] How to prevent a dns amplification attack
Date: Fri, 29 Mar 2013 23:02:05
Message-Id: 51561D51.6090405@iinet.net.au
In Reply to: Re: [gentoo-user] How to prevent a dns amplification attack by Paul Hartman
1 On 30/03/13 06:34, Paul Hartman wrote:
2 > On Thu, Mar 28, 2013 at 7:49 PM, Peter Humphrey
3 > <peter@××××××××××××××.org> wrote:
4 >> On Thursday 28 March 2013 20:53:49 Paul Hartman wrote:
5 >>
6 >>> In my case, my ISP's DNS servers are slow (several seconds to reply),
7 >>> fail randomly when they should resolve, return an IP (which goes to
8 >>> their ad-laden "helper" website if you are using a web browser) when
9 >>> they should instead return nxdomain, and they have openly admitted to
10 >>> selling customer DNS lookup history to marketers for targeted
11 >>> advertising.
12 >>
13 >>
14 >>
15 >> That is just evil. Have you no alternative to this ISP?
16 >
17 > Not really.
18 >
19 > I have a 100 megabit connection through the cable company; my only
20 > wired alternative is DSL (1.5 mbit for almost half the price I'm
21 > paying for 100mbit). Cellular or satellite are not viable options for
22 > me because of comparatively poor value, latency and miniscule data
23 > usage caps.
24 >
25
26 Can you do a tunnel to a cheap vsp instance that can access an external
27 dns, and feed all your dns queries through it? Considering the problems
28 with your existing setup, that looks attractive and you can have sane
29 fallbacks if neccessary.
30
31 I tried this to avoid the "Australia Tax" when online shopping overseas
32 and the small additional latency didnt seem to be a problem.
33
34 BillK

Replies

Subject Author
Re: [gentoo-user] How to prevent a dns amplification attack Michael Mol <mikemol@×××××.com>