editor
698
edits
OpenDNS Checker: Difference between revisions
→top: clean up
mNo edit summary |
(→top: clean up) |
||
| (6 intermediate revisions by one other user not shown) | |||
|
<indicator name="Diagnostics">[[File:menu-spanner.svg|link=:Category:Diagnostic Tools|30px|Back up to the Diagnostics Category]]</indicator>
=Automatic
On a monthly basis we scan customer IPv4 blocks to look for DNS servers; we will email if any are found to be open to possible abuse. There is no problem in customers running DNS servers but depending on its configuration it may be vulnerable to 'amplification attacks'.
The scans will come from 81.187.30.21 and will look up dnstesting.aa.org.uk.
==Manual Testing for Open DNS Resolvers==
There is a page on the AAISP control pages that lists your IPs that have an open DNS server running, and can also re-scan your IP blocks (IPv4). AAISP will re-scan automatically every so often and will alert customers by email if an open DNS resolver is found. Sorry, but we don't have enough time to scan IPv6 addresses :-)
You will be able run a scan there and then and also view historical results.
[[File:DNS_Checker1.png|none|frame|DNS Checker results]]
==More About DNS Server Vulnerabilities==▼
*See: [[:Category:Open DNS Resolvers]]▼
==Disabling Automatic Scans==
[[File:DNS-Check-flag.png|
You will still be able to run the checks manually.
[[Category:Diagnostic Tools]]
▲==More About DNS Server Vulnerabilities==
▲*See: [[:Category:Open DNS Resolvers]]
| |||