Topic 'Re: DNS Outage' in forum 'TekSavvy' - dslreports.com

Re: DNS Outage

Fri, 21 Dec 2012 10:41:39 EDT

derekm posted : That's good!

How were the servers able to be DDoS'd if they were accessible only by subscribers though?

Does that mean a particular subscriber was attacking your server from within your network?

I know there are some DNS amplification attacks they could probably do (that you might call a DDoS), but that seems like a terrible idea, on their part - and easy to fix on yours (i.e. terminate their connection, follow up with legal).

Maybe I don't understand, or maybe the attacker was really dumb.

Re: DNS Outage

Fri, 21 Dec 2012 09:44:01 EDT

TSI Gabe posted : We already have exactly those things.

Re: DNS Outage

Fri, 21 Dec 2012 08:47:18 EDT

derekm posted :

said by derekm:

said by TSI Gabe:

now DDoS attacking us

Has there been any discussion of splitting the DNS...

I'll take the lack of official response as a 'no'.

Re: DNS Outage

Mon, 17 Dec 2012 22:15:14 EDT

brad posted :

said by zacron:

That adds a layer of complication to things... But if it works then let's do it :)

It does not and that's the way a knowledgeable admin should be doing things anyway.

Re: DNS Outage

Mon, 17 Dec 2012 20:47:05 EDT

user451 posted :

said by dnsoutaage :

here is google dns. You can use is alternatively if somebody wants to keep using internet. Its fast and reliable.

8.8.8.8 or 8.8.4.4

Not sure I like Google getting even more info about our surfing habits.

But configuring a backup DNS server or 2 is definitely a good idea

Currently using something like this.

DNS1 Teksavvy
DNS2 OpenDNS
DNS3 Comodo

Re: DNS Outage

Mon, 17 Dec 2012 09:42:14 EDT

zacron posted : That adds a layer of complication to things... But if it works then let's do it :)
--
"Recognize, Realize, and Repent"

Re: DNS Outage

Mon, 17 Dec 2012 09:17:36 EDT

derekm posted :

said by TSI Gabe:

now DDoS attacking us

Has there been any discussion of splitting the DNS into:

- publicly accessible forward/reverse authoritative servers
- subscriber-only accessible caching servers (with appropriate egress/ingress filtering on the network perimeter)

So the next time your DNS gets DDoSed, the architecture of your DNS will limit the damage a non-subscriber can do to your average subscriber's Internet connectivity?

Re: DNS Outage

Sun, 16 Dec 2012 15:06:35 EDT

anon posted : Ha! Obviously with their mentality of entitlement they deserve to pay the maximum penalty! Hope their dumbass gets nailed :mad:

Re: DNS Outage

Sat, 15 Dec 2012 23:00:59 EDT

squircle posted : dns.pppoe.ca and dns2.pppoe.ca

Re: DNS Outage

Sat, 15 Dec 2012 22:56:18 EDT

anon posted : Distributel is having dns problems also.

»Distributel DNS servers dropping UDP

Re: DNS Outage

Sat, 15 Dec 2012 22:51:54 EDT

anon posted : using google dns now. thanks!

Re: DNS Outage

Sat, 15 Dec 2012 22:51:47 EDT

anon posted : Speaking of disgruntled clients, has anyone tried jumping onto the voltage pictures llc site right now? I think most of the attacks seem to be headed thataway.

Re: DNS Outage

Sat, 15 Dec 2012 22:35:06 EDT

xxgg posted : Ooops,

what is the default TSI DNS server address again? for DSL users, if that matters.

Re: DNS Outage

Sat, 15 Dec 2012 22:32:15 EDT

ReggieX posted : OK, things on Dupont hub seem to be back to normal. Thanks for the quick fix!

Re: DNS Outage

Sat, 15 Dec 2012 22:31:07 EDT

anon posted : here is google dns. You can use is alternatively if somebody wants to keep using internet. Its fast and reliable.

8.8.8.8 or 8.8.4.4

Re: DNS Outage

Sat, 15 Dec 2012 22:27:01 EDT

frank2029 posted : opendns works fine

Re: DNS Outage

Sat, 15 Dec 2012 22:25:11 EDT

b34tBoX posted : OK, got 8.8.8.8 working, thanks.
--
All Your Bass Are Belong To Us.

Re: DNS Outage

Sat, 15 Dec 2012 22:21:18 EDT

anon posted : I suppose you can find this disgruntled client and give him a verbal slap on my behalf. Either that, you maybe you can at least tell him to aim his DDoS cannons at someone who doesn't affect my connection.
Thanks to TSI and other users here for keeping us all updated.
Thanks to this I've downloaded set dns tool for the android devices, too.

Re: DNS Outage

Sat, 15 Dec 2012 22:11:36 EDT

Clark_Kent posted : Thank you ....I see the problem on my side also from Orleans Ontario.

Good luck!

Re: DNS Outage

Sat, 15 Dec 2012 22:11:01 EDT

b34tBoX posted : Oh, saw that but it seemed to be under LAN?
--
All Your Bass Are Belong To Us.

Re: DNS Outage

Sat, 15 Dec 2012 22:09:20 EDT

druneau posted : Basic ---> Network --> Static DNS

Re: DNS Outage

Sat, 15 Dec 2012 22:08:09 EDT

b34tBoX posted : How do you change DNS in Tomato?
--
All Your Bass Are Belong To Us.

Re: DNS Outage

Sat, 15 Dec 2012 22:01:14 EDT

enzymes posted : well, there's one user Teksavvy should be taking to court :D

Re: DNS Outage

Sat, 15 Dec 2012 21:58:06 EDT

SimplePanda posted : Of all the ISP's to DDoS over their activity / position on the copyright catastrophe in this country I'd think TekSavvy would be last on the list.

Idiot kiddies and their scripts...

Re: DNS Outage

Sat, 15 Dec 2012 21:57:47 EDT

zacron posted : ROFL... Sometimes people are stupid. I wish they'd think before doing something like this as it will have NO effect on the outcome of the case. --- I can fix anything; except stupid
--
"Recognize, Realize, and Repent"

Re: DNS Outage

Sat, 15 Dec 2012 21:57:37 EDT

voxframe posted : LOL! I bet there's one client who's gonna get his ass kicked.... :D

Re: DNS Outage

Sat, 15 Dec 2012 21:56:11 EDT

TSI Gabe posted : Quite plainly we got a message that someone was unhappy with the copyright issue and is now DDoS attacking us.

We are working on it.

Re: DNS Outage

Sat, 15 Dec 2012 21:49:17 EDT

odis172 posted : Same here in Gatineau.
did a dns lookup in pfsense for www.ncix.com:

206.248.154.22 No response
206.248.154.170 No response
8.8.8.8 44 msec

Re: DNS Outage

Sat, 15 Dec 2012 21:44:56 EDT

grunze510 posted : Yeah, I just switched from TS DNS to Google DNS. Works fine now.

Re: DNS Outage

Sat, 15 Dec 2012 21:44:55 EDT

sbrook posted : I changed DNS when it first appeared that it was DNS congestion, but then I changed to other DNS at Torix and it improved but still is poor response.

My suspicion is some routing issues at 151 Front.

Re: DNS Outage

Sat, 15 Dec 2012 21:44:06 EDT

derekm posted : Google DNS servers are working fine:

$ dig @8.8.8.8 slashdot.org ; <<>> DiG 9.8.1-P1 <<>> @206.248.154.22 @206.248.154.170 @8.8.8.8 slashdot.org; (1 server found);; global options: +cmd;; Got answer:;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57049;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION:;slashdot.org.INA ;; ANSWER SECTION:slashdot.org.285INA216.34.181.45

TekSavvy's are not:

$ dig @206.248.154.22 @206.248.154.170 slashdot.org ; <<>> DiG 9.8.1-P1 <<>> @206.248.154.22 @206.248.154.170 slashdot.org; (1 server found);; global options: +cmd;; connection timed out; no servers could be reached

Re: DNS Outage

Sat, 15 Dec 2012 21:42:50 EDT

Reboot123 posted : Same here, my google is not working =/

Re: DNS Outage

Sat, 15 Dec 2012 21:42:38 EDT

Charlez posted : Even dslreports cannot be resovled right now.

C:\>date
The current date is: 12/15/2012 Sat
Enter the new date: (mm-dd-yy)

C:\>time
The current time is: 21:39:45.29
Enter the new time:

C:\>nslookup www.dslreports.com 206.248.154.22
DNS request timed out.
timeout was 2 seconds.
Server: UnKnown
Address: 206.248.154.22

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to UnKnown timed-out

C:\>nslookup www.dslreports.com 8.8.8.8
Server: google-public-dns-a.google.com
Address: 8.8.8.8

Non-authoritative answer:
Name: www.dslreports.com
Address: 209.123.109.175

Re: DNS Outage

Sat, 15 Dec 2012 21:42:21 EDT

zomo posted : Yup - also having DNS issues on cable.

Re-pointing my router to alternate resolvers gets around this problem.

Zomo...

Re: DNS Outage

Sat, 15 Dec 2012 21:40:53 EDT

SimplePanda posted : Same issue here. Trouble with DNS lookups and inconsistent access. Pings work to parts of the internet, but no others.

DNS Outage

Sat, 15 Dec 2012 21:38:09 EDT

squircle posted : I can't query dns.pppoe.ca or dns2.pppoe.ca right now on DSL, so it looks like the DNS is down at the moment (although both machines are pingable so maybe BIND (or whatever TSI uses) stopped working temporarily).

Just FYI :)