Linode Forum
https://forum.linode.com/

Open Resolver question -Not solved now!
https://forum.linode.com/viewtopic.php?f=19&t=10228
Page 1 of 1

Author:  mushget [ Mon Jul 08, 2013 5:54 am ]
Post subject:  Open Resolver question -Not solved now!

I have the same problem as this post described
viewtopic.php?f=19&t=9537

My DNS server is acting as an unrestricted open resolver and
Unusually high network traffic

03:41:34.743798 IP 62.141.41.104.40570 > 69.164.198.25.domain: 47790+ [1au] ANY? . (28)
03:41:34.743820 IP 62.141.41.104.40570 > 69.164.198.25.domain: 47790+ [1au] ANY? . (28)
03:41:34.743825 IP 62.141.41.104.40570 > 69.164.198.25.domain: 47790+ [1au] ANY? . (28)
03:41:34.743844 IP 62.141.41.104.40570 > 69.164.198.25.domain: 47790+ [1au] ANY? . (28)
03:41:34.743848 IP 62.141.41.104.40570 > 69.164.198.25.domain: 47790+ [1au] ANY? . (28)
03:41:34.743868 IP 62.141.41.104.40570 > 69.164.198.25.domain: 47790+ [1au] ANY? . (28)
03:41:34.743873 IP 62.141.41.104.40570 > 69.164.198.25.domain: 47790+ [1au] ANY? . (28)
03:41:34.744031 IP 69.164.198.25.domain > 62.141.41.104.40570: 47790 14/13/23 Type46[|domain]
03:41:34.744152 IP 69.164.198.25.domain > 62.141.41.104.40570: 47790 14/13/23 Type46[|domain]
03:41:34.744160 IP 69.164.198.25.domain > 62.141.41.104.40570: 47790 14/13/23 Type46[|domain]
03:41:34.744202 IP 69.164.198.25.domain > 62.141.41.104.40570: 47790 14/13/23 Type46[|domain]
03:41:34.744215 IP 69.164.198.25.domain > 62.141.41.104.40570: 47790 14/13/23 Type46[|domain]
03:41:34.744309 IP 69.164.198.25.domain > 62.141.41.104.40570: 47790 14/13/23 Type46[|domain]
03:41:34.744477 IP 69.164.198.25.domain > 62.141.41.104.40570: 47790 14/13/23 Type46[|domain]
03:41:34.744715 IP 69.164.198.25.domain > 62.141.41.104.40570: 47790 14/13/23 Type46[|domain]
03:41:34.744765 IP 69.164.198.25.domain > 62.141.41.104.40570: 47790 14/13/23 Type46[|domain]
03:41:34.744771 IP 69.164.198.25.domain > 62.141.41.104.40570: 47790 14/13/23 Type46[|domain]
03:41:34.744925 IP 69.164.198.25.domain > 62.141.41.104.40570: 47790 14/13/23 Type46[|domain]
03:41:34.745127 IP 69.164.198.25.domain > 62.141.41.104.40570: 47790 14/13/23 Type46[|domain]


I know this can be solved by edit the named.conf file. add some rules. But i can't find this file on my server in the directory /etc/

my server is My CentOS 5.6 Profile (Latest 32 bit (3.9.3-x86-linode52)). I Only installed KLOXO. NO Other programs.
Any advises will be appreciated. thanks.

Author:  bacon [ Mon Jul 08, 2013 6:13 am ]
Post subject:  Re: Open Resolver question -Not solved now!

The first Google result that I get is http://www.maxofweb.com/2013/03/kloxo-d ... ction.html

Author:  Main Street James [ Mon Jul 08, 2013 9:03 am ]
Post subject:  Re: Open Resolver question -Not solved now!

mushget wrote:
my server is My CentOS 5.6 Profile (Latest 32 bit (3.9.3-x86-linode52)). I Only installed KLOXO. NO Other programs.
Any advises will be appreciated. thanks.

I have Kloxo installed and I hate it. I'm going to move to something else at the end of this summer (when I have time to migrate all our sites to a different box Linode). If you're not married to Kloxo you may want to consider an alternative (I'm looking at one of these two related control panels: virtualmin.com or webmin.com).

I believe the file you're looking for is /var/named/chroot/etc/kloxo.named.conf


MSJ

Author:  sednet [ Mon Jul 08, 2013 3:43 pm ]
Post subject:  Re: Open Resolver question -Not solved now!

Don't run an open resolver, you will get DNS amplification nonsense. If your named.conf isn't in /etc/bind it's most likely in a choot jail. 'locate named.conf' should find it.

Add something like the following to named.conf.local or whatever the local editable file is on your system.

Code:
        allow-recursion {
                127.0.0.1;
                ::1;
        };


The above will only allow 127.0.0.1 and ::1 (IPv6 localhost) to perform recursive queries.

Page 1 of 1 All times are UTC-04:00
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/