News for hackers. Stuff that matters.

A comment on Pi-Hole 4.3.2. Parent comment

Re:Pi-Hole 4.3.2 by move-on-by on Tuesday September 24, 2019 @10:00AM (#21060220)
Please do not open port 53. Without proper counter-measures, open resolvers contribute to DNS Amplification attacks. If you have an open resolver, I guarantee that it is being used maliciously. Please close your port 53 and use a VPN to securely access your pihole.

DNS Amplification Attacks: https://www.us-cert.gov/ncas/alerts/TA13-088A

[ Parent | on HN ]
Re:Pi-Hole 4.3.2 by shadyMrPatch on Tuesday September 24, 2019 @10:28AM (#21060523)
didn't know about that. I'll give that a read later.
[ Parent | on HN ]
Re:Pi-Hole 4.3.2 by move-on-by on Tuesday September 24, 2019 @10:33AM (#21060582)
Its pretty simple:

> A Domain Name Server (DNS) amplification attack is a popular form of distributed denial of service (DDoS) that relies on the use of publically accessible open DNS servers to overwhelm a victim system with DNS response traffic.

DNS queries are much smaller then DNS responses. Making a huge amount of queries uses less bandwidth then uses to respond - making it a prime candidate for DDOS attacks. Look at your logs, no doubt you will see a large number of requests for various hosts. This is your system being used to attack people. Please close the port.

[ Parent | on HN ]