DDoS Attack Against Dyn Managed DNS

Post by eridius » Sat, Oct 22, 2016, 12:02 AM UTC

thomask0 wrote: post #606

eridius wrote: post #565

Earlier quoted context omitted.

Trump says he never met Putin, now. In the past, he said he did. I just did a search for "trump met putin" and found a bunch of news sites reporting that in a GOP debate a while ago Trump said “I got to know him very well because we were both on ‘60 Minutes,’ we were stablemates, and we did very well that night.”

Trump was boasting in that debate about nothing, they were on the same episode of 60 minutes but they were not even on the same continent for that episode. http://time.com/4108198/donald-trump-60-minutes-putin/

Post by spc476 » Sat, Oct 22, 2016, 12:11 AM UTC

JoshTriplett wrote: post #428

bhauer wrote: post #214

Out of curiosity, why do caching DNS resolvers, such as the DNS resolver I run on my home network, not provide an option to retain last-known-good resolutions beyond the authority-provided time to live? In such a configuration, after the TTL expiration, the resolver would attempt to refresh from the authority/upstream provider, but if that attempt fails, the response would be a more graceful failure of returning a la…

It'd be nice to have a "backup TTL" included, to allow sites to specify whether and how long they wanted such caching behavior. Also, that cache would need to only kick in when the server was unreachable or produced SERVFAIL, not when it returned a negative result. Negative results returned by the authoritative server are correct, and should not result in the recursive resolver returning anything other than a negativ…

Post by Xorlev » Sat, Oct 22, 2016, 12:19 AM UTC

duaneb wrote: post #638

bhauer wrote: post #272

Earlier quoted context omitted.

Awesome! Is this available as software I can install on my network? Sorry, probably a dumb question.

Yes, but beware, they (at least used to) resolve unknown names to a page filled with ads.

Post by gwu78 » Sat, Oct 22, 2016, 12:25 AM UTC

davidu wrote: post #255

bhauer wrote: post #214

Out of curiosity, why do caching DNS resolvers, such as the DNS resolver I run on my home network, not provide an option to retain last-known-good resolutions beyond the authority-provided time to live? In such a configuration, after the TTL expiration, the resolver would attempt to refresh from the authority/upstream provider, but if that attempt fails, the response would be a more graceful failure of returning a la…

OpenDNS does this: https://support.opendns.com/hc/en-us/articles/227987767-Dyna... It's called SmartCache.

   cd||exit
   [ -c null ]||mknod null c 2 2 
   
   case $# in
   0)
   {
    sed '
         /#/d;
         /^[0-9]/!d;
    ' /etc/hosts \
     |{ 
        while read a b c d;
        do 
        echo +${#b},${#a}:$b-\>$a;
        done;
      }
    echo;
   } \
    |exec awk '!($0 in a){a[$0];print}' \
    |exec cdbmake $0.cdb $0.t||exit
   exec cdbdump null;
   exec cdbget $1