[190761] in North American Network Operators' Group
Re: cloudflare hosting a ddos service?
daemon@ATHENA.MIT.EDU (Patrick W. Gilmore)
Tue Jul 26 21:55:43 2016
X-Original-To: nanog@nanog.org
From: "Patrick W. Gilmore" <patrick@ianai.net>
In-Reply-To: <57981346.9090403@tiedyenetworks.com>
Date: Tue, 26 Jul 2016 21:55:39 -0400
To: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
CloudFlare will claim they are not hosting the problem. They are just =
hosting the web page that lets you pay for or points at or otherwise =
directs you to the problem.
The actual source of packets is some other IP address. Therefore, they =
can keep hosting the web page. It is not sending the actual =
[spam|DDoS|hack|etc.], right? So stop asking them to do something about =
it!
Whether you think that is the proper way to provide service on the =
Internet is left as an exercise to the reader.
--=20
TTFN,
patrick
> On Jul 26, 2016, at 9:49 PM, Mike <mike-nanog@tiedyenetworks.com> =
wrote:
>=20
> Hi,
>=20
> So vbooter.org's dns and web is hosted by cloudflare?
>=20
> "Using vBooter you can take down home internet connections, websites =
and game servers such us Minecraft, XBOX Live, PSN and many more."
>=20
> dig -t ns vbooter.org
>=20
> ; <<>> DiG 9.9.5-3ubuntu0.8-Ubuntu <<>> -t ns vbooter.org
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62177
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
>=20
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 512
> ;; QUESTION SECTION:
> ;vbooter.org. IN NS
>=20
> ;; ANSWER SECTION:
> vbooter.org. 21599 IN NS rick.ns.cloudflare.com.
> vbooter.org. 21599 IN NS amy.ns.cloudflare.com.
>=20
> dig -t a www.vbooter.org
>=20
> ; <<>> DiG 9.9.5-3ubuntu0.8-Ubuntu <<>> -t a www.vbooter.org
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34920
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1
>=20
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 512
> ;; QUESTION SECTION:
> ;www.vbooter.org. IN A
>=20
> ;; ANSWER SECTION:
> www.vbooter.org. 299 IN CNAME vbooter.org.
> vbooter.org. 299 IN A 104.28.13.7
> vbooter.org. 299 IN A 104.28.12.7
>=20
>=20
> Can anyone from cloudflare answer me why this fits with your =
business model?
>=20
> Mike-
