[161739] in North American Network Operators' Group
Re: Open Resolver Problems
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Tue Mar 26 11:17:34 2013
To: Tom Paseka <tom@cloudflare.com>
In-Reply-To: Your message of "Tue, 26 Mar 2013 07:43:15 -0700."
<CAL89Sg+BUmDpUfAEHz5kbHbzKzbzPr0aXt_iFGGxbZVpGZR6qw@mail.gmail.com>
From: Valdis.Kletnieks@vt.edu
Date: Tue, 26 Mar 2013 11:07:10 -0400
Cc: NANOG <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--==_Exmh_1364310430_3451P
Content-Type: text/plain; charset=us-ascii
On Tue, 26 Mar 2013 07:43:15 -0700, Tom Paseka said:
> On Tue, Mar 26, 2013 at 7:38 AM, Jay Ashworth <jra@baylink.com> wrote:
> > Sure. But OpenDNS, Google, and the other providers of recursive servers
> > for edge cases can't do that anymore?
> Of cos they can. But they take the security of their open recursive servers
> very seriously. 99.99999% of the open recursors dont, hence the problem.
And what, *exactly* do they do different from the other 5-9's?
So far, I've seen lots of people say "close that shit down", but only 2
actual URLs posted that basically both say "only do recursion for IP addresses
within your ASN". That's at least a *bit* more helpful than just telling us
to close it down. Unfortunately, we already know now to do that - but that
isn't the problem that some of us are looking to solve, which is "queries from
your own users mobile devices that are currently *outside* your ASN".
(And *please* make note that although the fine networking staff of AS1312
can probably figure this out on our own once we're supplied with a big
enough pile of square tuits and a belt sander, there's a *lot* of AS's out
there that are going to need a tad more hand-holding...)
--==_Exmh_1364310430_3451P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001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=Tyis
-----END PGP SIGNATURE-----
--==_Exmh_1364310430_3451P--
