Category:Open DNS Resolvers: Difference between revisions

← Older edit

Category:Open DNS Resolvers (view source)

Revision as of 11:29, 7 November 2016

202 bytes added , 7 November 2016

m

update clueless to control

Aa-jamie

75

edits

Revision as of 14:42, 25 September 2013 (view source) AA-Andrew (talk \| contribs) m (→‎Automatic and Manual Testing for Open Resolvers) ← Older edit		Latest revision as of 11:29, 7 November 2016 (view source) Aa-jamie (talk \| contribs) m (update clueless to control)
(8 intermediate revisions by 2 users not shown)
==What is an open DNS resolver?== Every day, each time we use DNS to look up names and IPs on the Internet - ege.g. when you put bbc.co.uk in your browser, your computer needs to look up the IP address of the BBC's web server. To do this it will use DNS. The DNS server will respond back to your computer with the information. AAISP customers normally use the AAISP DNS servers, or often their own router. ==What if I run a DNS server on purpose?== It is quite legitimate for people to run DNS servers on their network, and we are happy for them to do so - in these cases access to them should be restricted or limited. If you run an authoritative DNS server, configure it only to return records for your domain. If you run a caching resolver, configure it to only return records for your users (firewall to only allow your users), and consider implementing rate-limiting. You can disable our automatic scanning, see [[#Disabling Automatic Scans]] below. =How to prevent this?= There is a page on the AAISP control pages that lists your IPs that have an open DNS server running, and can also re-scan your IP blocks (IPv4). AAISP will re-scan automatically every so often and will alert customers by email if an open DNS resolver is found. Sorry, but we don't have enough time to scan IPv6 addresses. Log in to the [https://~~clueless~~control.aa.net.uk/ Control Pages], and then either click on one of your IPv4 addresses or a broadband line. On these pages you'll see a link to the open DNS page. ==Disabling Automatic Scans== [[File:DNS-Check-flag.png\|border]] You will still be able to run the checks manually. [[Category:~~Router~~Routers]] [[Category:DNS]] [[Category:Diagnostic Tools]]