Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


fix kloxo dns udp floods attacks
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

fix kloxo dns udp floods attacks

XSXXSX Member, Host Rep
edited January 2014 in General

run the shell

sed -i 's/recursion yes/recursion no/g' /etc/named.conf

cat>> /var/named/chroot/etc/named.conf<<EOF

options {

recursion no;

};

EOF

/etc/init.d/named restart

Thanked by 1agentmishra

Comments

  • agentmishraagentmishra Member, Host Rep

    nice

  • @Pzea or just simply switch to djbdns

  • Or simply do not use something that's not maintained for how long? 3 years now.

  • MunMun Member
    edited January 2014

    Or get married to @serverian, have children with him, and your children will build their own CP :D

    Mun

    Thanked by 1Magiobiwan
  • recursion should "always" be turned off, you don't want your server be part of a dns reflection attack.

    Kloxo or better use Kloxo-MR (mr is still being updated) and has way more functions!!!

    @Mun, if you have nothing usefull to say, then just say nothing...

  • MunMun Member

    @Gien said:
    recursion should "always" be turned off, you don't want your server be part of a dns reflection attack.

    Kloxo or better use Kloxo-MR (mr is still being updated) and has way more functions!!!

    Mun, if you have nothing usefull to say, then just say nothing...

    THAT WAS USEFUL INFORMATION, consider yourself lucky!

    Mun

  • jarjar Patron Provider, Top Host, Veteran

    @Gien said:
    recursion should "always" be turned off, you don't want your server be part of a dns reflection attack.

    Kloxo or better use Kloxo-MR (mr is still being updated) and has way more functions!!!

    Mun, if you have nothing usefull to say, then just say nothing...

    Pretty sure hooking up with @serverian is a useful suggestion. He's dreamy.

    Thanked by 1skybucks100
  • XSXXSX Member, Host Rep

    for photonvps python shell

    wget https://www.photonvps.com/files/bindrecursion.py

    chmod 755 bindrecursion.py

    ./recursion.py

  • this is for Bind DNS ?

  • @jarland said:
    Pretty sure hooking up with serverian is a useful suggestion. He's dreamy.

    All you will is end up as a brand.

    Thanked by 2Mark_R jar
  • Kloxo Official (6.1.12) not set 'recursion off' and not set 'allow-transfer' (for secondary dns). Kloxo-MR already set 'recursion off' and listing IPs for 'allow-transfer'.

    Thanked by 1Spirit
Sign In or Register to comment.