Latest revision as of 00:04, 18 August 2018

Automatic Testing for Open DNS Resolvers

On a monthly basis we scan customer IPv4 blocks to look for DNS servers; we will email if any are found to be open to possible abuse. There is no problem in customers running DNS servers but depending on its configuration it may be vulnerable to 'amplification attacks'.

The scans will come from 81.187.30.21 and will look up dnstesting.aa.org.uk.

Manual Testing for Open DNS Resolvers

There is a page on the AAISP control pages that lists your IPs that have an open DNS server running, and can also re-scan your IP blocks (IPv4). AAISP will re-scan automatically every so often and will alert customers by email if an open DNS resolver is found. Sorry, but we don't have enough time to scan IPv6 addresses :-)

Accessing This Feature

Access is via the Control Pages as follows:

Log in to the Control Pages with your xxx@a login
either: a) click on one of your IPv4 addresses, and then click the 'View/run' link
or b) Click the 'DNS Resolvers' link on the left menu
...follow the instructions from there

You will be able run a scan there and then and also view historical results.

DNS Checker results

More About DNS Server Vulnerabilities

See: Category:Open DNS Resolvers

Disabling Automatic Scans

If you like, you can disable our regular scans on a per IP block basis. From the Control Pages, click on the IP block and change the setting.

Disabling our automatic testing

You will still be able to run the checks manually.

@@ Line 1: / Line 1: @@
+<indicator name="Diagnostics">[[File:menu-spanner.svg|link=:Category:Diagnostic Tools|30px|Back up to the Diagnostics Category]]</indicator>
-=Automatic and Manual Testing for Open Resolvers=
+=Automatic Testing for Open DNS Resolvers=
-There is a page on the AAISP control pages that lists your IPs that have an open DNS server running, and can also re-scan your IP blocks (IPv4). AAISP will re-scan automatically every so often and will alert customers by email if an open DNS resolver is found. Sorry, but we don't have enough time to scan IPv6 addresses.
+On a monthly basis we scan customer IPv4 blocks to look for DNS servers; we will email if any are found to be open to possible abuse. There is no problem in customers running DNS servers but depending on its configuration it may be vulnerable to 'amplification attacks'.
-Log in to the [https://clueless.aa.net.uk/ Control Pages], and then either click on one of your IPv4 addresses or a broadband line. On these pages you'll see a link to the open DNS page.
+The scans will come from 81.187.30.21 and will look up dnstesting.aa.org.uk.
-==Disabling Automatic Scans==
-On a per IP block basis you can disable our regular scans. From the Control Pages, click on the IP block and change the setting.
+==Manual Testing for Open DNS Resolvers==
-[[File:DNS-Check-flag.png|border]]
+There is a page on the AAISP control pages that lists your IPs that have an open DNS server running, and can also re-scan your IP blocks (IPv4). AAISP will re-scan automatically every so often and will alert customers by email if an open DNS resolver is found. Sorry, but we don't have enough time to scan IPv6 addresses :-)
-You will still be able to run the checks manually.
+{{CPbox|#either: a) click on one of your IPv4 addresses, and then click the 'View/run' link
+#or b) Click the 'DNS Resolvers' link on the left menu
+#...follow the instructions from there}}
+You will be able run a scan there and then and also view historical results.
+[[File:DNS_Checker1.png|none|frame|DNS Checker results]]
 ==More About DNS Server Vulnerabilities==
 *See: [[:Category:Open DNS Resolvers]]
+==Disabling Automatic Scans==
+If you like, you can disable our regular scans on a per IP block basis. From the Control Pages, click on the IP block and change the setting.
+[[File:DNS-Check-flag.png|none|frame|Disabling our automatic testing]]
+You will still be able to run the checks manually.
+[[Category:Diagnostic Tools]]