1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

DNS reflection attack - What does this mean?

Discussion in 'Web Hosting' started by warner410, Sep 8, 2014.

  1. warner410

    warner410 Regular Member

    Joined:
    Jul 28, 2012
    Messages:
    376
    Likes Received:
    172
    I could not access my VPS. When I asked my host about it, I got this reply:

    Can someone explain what it means?
     
  2. Asif WILSON Khan

    Asif WILSON Khan Executive VIP Premium Member

    Joined:
    Nov 10, 2012
    Messages:
    10,115
    Likes Received:
    28,556
    Gender:
    Male
    Occupation:
    Fun Lovin' Criminal
    Location:
    London
    Home Page:
    If you Google "DNS reflection attack" you will find the answer.

    http://technet.microsoft.com/en-us/security/hh972393.aspx

    http://lmgtfy.com/?q=DNS+reflection+attack
     
    • Thanks Thanks x 1
  3. warner410

    warner410 Regular Member

    Joined:
    Jul 28, 2012
    Messages:
    376
    Likes Received:
    172
  4. Asif WILSON Khan

    Asif WILSON Khan Executive VIP Premium Member

    Joined:
    Nov 10, 2012
    Messages:
    10,115
    Likes Received:
    28,556
    Gender:
    Male
    Occupation:
    Fun Lovin' Criminal
    Location:
    London
    Home Page:

    You will be better off consulting your VPS Host/Support but here is some info:

    http://support.simpledns.com/kb/a99/what-is-an-open-dns-server-and-how-do-i-fix-it.aspx
    http://serverfault.com/questions/57...ow-can-i-protect-my-server-from-being-misused
    http://dns.measurement-factory.com/surveys/openresolvers.html
    http://technet.microsoft.com/en-us/library/cc771738.aspx

    If you want anymore help then you will need to start sharing details of the system. Is it a Linux/Windows server etc
     
  5. SharkServers

    SharkServers Regular Member

    Joined:
    Jun 29, 2014
    Messages:
    380
    Likes Received:
    181
    Occupation:
    Web Hosting
    Location:
    DMCA? Pff! www.SuckMyBallsDM.CA
    Home Page:
    The situation can be avoided by properly configuring the software running on your VPS - particularly, the DNS server. As you said, it's too technical for you, so you better get someone knowledgeable to do that for you.

    If you decide to look for someone to help you with this, mention that you need to disable recursive queries for the DNS server, which is exactly what you need done to prevent this sort of issue in the future.
     
    Last edited: Sep 9, 2014
  6. warner410

    warner410 Regular Member

    Joined:
    Jul 28, 2012
    Messages:
    376
    Likes Received:
    172
    I am using Windows Server 2008 R2.

    When I go to Server Management > Roles > DNS Server is not installed.

    Can a deflection attack happen even without the DNS server being installed?
     
  7. Asif WILSON Khan

    Asif WILSON Khan Executive VIP Premium Member

    Joined:
    Nov 10, 2012
    Messages:
    10,115
    Likes Received:
    28,556
    Gender:
    Male
    Occupation:
    Fun Lovin' Criminal
    Location:
    London
    Home Page:
    Try with the command line:
    http://technet.microsoft.com/en-us/library/cc771738.aspx

    But you really need to be speaking to your host.