Abuse Department - Open Recursive DNS exploits

[Slackjaw190]

What would you make of this? It’s beyond me

A sweep of customer's IP allocations has revealed the following IPs in your range are showing as susceptible to Open Recursive DNS exploits:

You can confirm this is the case using our recursive DNS tool - http://security.zensupport.co.uk/

This particular type of vulerability is viewed as extremely serious, and we ask for your co-operation in removing it as a threat. Information on open recursive DNS exploits is available here -
http://www.zensupport.co.uk/knowledgebase/article.aspx?id=10538 - which also includes some possible fixes for the problem.

Please take action to secure your equipment.

Technicolor 582n routers can act as an Open Recursive DNS server in particular configurations. We have a guide on how to secure them here - http://support.zen.co.uk/kb/KnowledgebaseArticle.aspx?articleid=11380

Note some models of Draytek router have a firmware bug that turns on ODR. If you have a Draytek router you may need to speak to Draytek to obtain a new firmware.

Best regards

I used the recursive DNS server detection tool and the result was open.

Thanks

Slack

 

[FrenchTart]

Follow the guide they linked you to. Job done

 

[KIA]

Nasty. Why is the firewall disabled?

 

[Slackjaw190]

Nasty. Why is the firewall disabled?

Blah, I thought it was on

 

[morfmedia]

This exploit was used to cause the recent monster ddos of I think 300+ gbit per second.

 

[KIA]

This exploit was used to cause the recent monster ddos of I think 300+ gbit per second.

Indeed. I wonder how many of Zen's customers are vulnerable.