Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

OpenDNS Checker: Difference between revisions

Content deleted Content added
AA-Andrew (talk | contribs)
mNo edit summary
AA-Andrew (talk | contribs)
mNo edit summary
Line 1: Line 1:
=Automatic and Manual Testing for Open Resolvers=
=Automatic Testing for Open DNS Resolvers=


On a monthly basis we scan customer IPv4 blocks to look for DNS servers; we will email if any are found to be open to possible abuse. There is no problem in customers running DNS servers but depending on its configuration it may be vulnerable to 'amplification attacks'.
On a monthly basis we scan customer IPv4 blocks to look for DNS servers; we will email if any are found to be open to possible abuse. There is no problem in customers running DNS servers but depending on its configuration it may be vulnerable to 'amplification attacks'.


The scans will come from 81.187.30.21 and will look up dnstesting.aa.org.uk.

==Manual Testing for Open DNS Resolvers==
There is a page on the AAISP control pages that lists your IPs that have an open DNS server running, and can also re-scan your IP blocks (IPv4). AAISP will re-scan automatically every so often and will alert customers by email if an open DNS resolver is found. Sorry, but we don't have enough time to scan IPv6 addresses :-)
There is a page on the AAISP control pages that lists your IPs that have an open DNS server running, and can also re-scan your IP blocks (IPv4). AAISP will re-scan automatically every so often and will alert customers by email if an open DNS resolver is found. Sorry, but we don't have enough time to scan IPv6 addresses :-)


Line 15: Line 18:


==Disabling Automatic Scans==
==Disabling Automatic Scans==
On a per IP block basis you can disable our regular scans. From the Control Pages, click on the IP block and change the setting.
If you like, you can disable our regular scans on a per IP block basis. From the Control Pages, click on the IP block and change the setting.


[[File:DNS-Check-flag.png|border]]
[[File:DNS-Check-flag.png|border]]