Open Resolver Problems

[hhoffman at ip-solutions.net (Harry Hoffman)]

What are those who provide open resolvers, such as google, doing to
combat the problem?

It would be nice to be able to provide open resolvers as a service and
combat the various threats associated with them.


Cheers,
Harry

On 03/25/2013 10:22 AM, Jared Mauch wrote:
> All,
> 
> Open resolvers pose a security threat.  I wanted to let everyone know about a search tool that can help you find the ones within your organization. Treat it like a big "BETA" stamp is across it, but please try it out and see if you can close down any hosts within your network.
> 
> This threat is larger than the SMURF amplification attacks in the past and can result in some quite large attacks.  I've seen this spilling out into other mailing lists (e.g.: juniper-nap and others).
> 
> Please send feedback about links that should be included or documentation and spelling errors to me.
> 
> openresolverproject.org
> 
> Some basic stats:
> 
> 27 million resolvers existed as of this dataset collection
> 
> only 2.1 million of them were "closed".
> 
> We have a lot to do to close the hosts, please do what you can to help.
> 
> Thanks,
> 
> - Jared
> 
>