DNS external attacks

[Guest]

[phqr58]

I've been testing against external attacks. No meeting as blocking DNS attack.

The following link shows that vulnerable ENDIAN

http://openresolver.com/

[christophel77]

Hi

try this command

iptables -A INPUT -p udp --dport 53 -m u32 --u32 "0x28=0x0000ff00"

iptables -A INPUT -p udp --dport 53 -m u32 --u32 "0x28=0x03697363 && 0x2c=0x036f7267"

iptables -A INPUT -p udp --dport 53 -m u32 --u32 "0x28=0x02646b00"

[mmiat]

sorry but I've not understood
if I check an ip from a network that uses Endian and it detects vulnerability, this means that my endian is vilnerable?
thanks

[Timmeh]

i think this test only check if the dns server allows recursive queries and therefore enabling dns amplification...

not vunerable just open to abuse