荣耀彩票代理

IT技术互动交流平台

大危机开放式DNS解析器必须铲除

作者:wy  来源:网络整理  发布日期:2019-01-28 08:31:00
   各位广大的网名们睁大你们的眼睛擦亮你们的眼球,如果遇到开放式DNS解析器这个十分危险随时都有可能爆炸的地雷,请十分小心因为它的攻击性非常极其的强烈,很有可能使你的网络系统电脑设备等等都很有可能受到严重的威胁。

 虽然近日针对欧洲反垃圾邮件组织Spamhaus发动的大规模DDoS攻击其危害程度不如早期传闻声称的那么大,但是此事件值得关注的原因在于,它们暴露了互联网众多根本薄弱环节当中的几个。其中一个就是开放式DNS解析器,这种解析器为一种名为DNS放大(DNS amplification)的攻击手法提供了可趁之机。而这种攻击手法具体指,目标服务器每向外发送1个字节,攻击者就向这些服务器发送多达100个字节的网络拥塞流量。

  既有技术专长又有影响力的有关组织会不会开始以一种整体性、实质性的方式解决这些不足,从而提高互联网荣耀彩票代理的安全性,这仍需拭目以待。遗憾的是,恐怕需要发生破坏性和危害性更大的安全事件才会促使有关组织积极行动起来。

服务器

  KABASIJIANQUANXINWENWANGZHANThreat PostKANDENGLEYIPIANJINGCAIDEBAODAOSHENRUQIANCHUDIJIESHAOLEKAIFANGSHIJIEXIQI、DNSFANGDAGONGJIJIQIZAIZHENDUISpamhausDEDDoSGONGJIZHONGBANYANDEJIAOSE:

  ZHEIFANGMIANXIXIXIANGGUANDEYIGEGENBENXING、PUBIANXINGDEWENTIYUKAIFANGSHIDNSJIEXIQIBEIYONGLAIZHENDUIRUISHIZHEIJIAFANLAJIYOUJIANZUZHIFADONGDDoSGONGJIYOUGUAN。KAIFANGSHIJIEXIQIZAISONGHUIDNSDAFUZHIQIANBINGBUDUISHUJUBAOFASONGZHEDEIPDIZHIJINXINGYANZHENG。YINCI,GONGJIZHEPIANGUOSHOUHAIZHEIPDIZHIHOU,JIUNENGGOUXIANGSHOUHAIZHEFASONGDALIANGDEGONGJILIULIANG,GONGJILIULIANGYUQINGQIULIULIANGZHIBIDADAOLE100:1。ZHURUCILEIDEDNSFANGDAGONGJIZUIJINBEIHEIKEXINGDONGZHUYIZHE、QIAOZHALESUOZHEYIJISHANGLEHEIMINGDANDEWANGZHANZHUJISUOSHIYONG,ERQIEDAHUOCHENGGONG。

  KAIFANGSHIDNSJIEXIQIXIANGMUZUZHIDEJared MauchGAOSUThreat Post,CANYUSpamhausGONGJIDEJIANGSHIWANGLUOSHIYONGLE30000DUOGEDUTEDEDNSJIEXIQI,"RUGUOSHISHIYIQIGENGDAFANWEIDEGONGJI,ZHEIXIEJIEXIQIDEGONGTONGWEILIKENENGHUIBEIBUFAFENZIYONGLAIRANGZHEIGEQUANQIUWANGLUODEDABUFENXITONGXIANRUTANHUAN。"

  JUThreat PostSHENGCHENG,JIEJUEBANFAJIUSHI:"KAIFANGSHIDNSJIEXIQIXIANGMUZUZHIJIQITAZUZHI(RUDNSFUWUTIGONGSHANGAfilias)JIANYISHISHIYUANDIZHIYANZHENGJIZHI。XIANYICUNZAIDEIETF RFC, BCP-38JUTIMINGQUELERUHESHIYONGYUANDIZHIYANZHENGJIZHI,YIJIRUHEJIANLIZHEIZHONGJIAGOU,YICUOBAIIPYUANDIZHIQIPIANSHOUFA。"

  另外,系统管理员Trevor Pott在The Register网站上发表了一篇内容翔实的博文,他坦诚自己无意中沦为了DDoS攻击的帮凶,起因是"他在搭建位于其网络边缘上的一台DNS服务器时,犯下了一个简单的配置错误。"他称之为充当路由器的"边缘洗涤器"(edge scrubber),它向数据中心里面的服务器和路由器荣耀彩票代理分发IP地址。它还代表网络上的所有其他设备,"起到了各种"枯燥粗活"的功能"。它是数据中心/本地网络时间服务器、外部DNS服务器、边缘服务器和带宽限制器。

  TABIAOSHI,WENTIZAIYU,TAWANGLEJINYONGFUWUQISHANGDEDIGUICHAXUN,ZHEISHIDETANEITAIFUWUQICHENGLEBEIDNSFANGDAGONGJILIYONGDEYIGEGONGJU。TAJIESHI:"DNSFUWUQINENGGOUYILIANGZHONGJIBENFANGSHIDANGZHONGDEYIZHONGFANGSHILAIPEIZHI。ZAIYIZHONGKENENGDEPEIZHIXIA,DNSFUWUQIZHIWEITAFUZEFUWUDEDUIXIANGTIGONGYUMINGFUWU(MINGLINGSHI)。ZAILINGYIZHONGPEIZHIXIA,DNSFUWUQICHULETIGONGNEIXIEYUMINGFUWUWAI,HAIZAIGENGGUANGFANDEHULIANWANGSHANGXUNZHAOTAYUANBENWUQUANGUANLIDERENHEYU(DIGUISHI)。ZHENGSHIDIGUISHIDNSFUWUQIRANGHULIANWANGDEYIZHENGCHANGYUNXING。TAMENYESHIYIZHONGGONGJITUJING。"

荣耀彩票代理  TAXIANGXIDIJIESHILERUHEXIUFUTANEITAIFUWUQICUNZAIDEPEIZHIWENTI。JIANERYANZHI,WENTIYUANZIYUZHEIZHONGJIADING:BIND(SHIXIANDNSXIEYIDEXITONG)ZAIMORENQINGKUANGXIAJINYONGDIGUI;JIEJUEBANFAXUYAO"ZHILINGBINDZHISHOULILAIZIQISHUJUZHONGXINLIMIANDEFUWUQIDEDIGUIQINGQIU。"

  RUGUOXIAOHUOBANMENYUDAOLELEISIDEWENTIQINGYIDINGYAOZHUAZHUZHEIGEJIYUJIANGWOMENWENZHANGLISUOTUIJIANDERUANJIANHECHANPINYIYIDOUSHIYIBIAN,RUGUONIHAIHENGANXINGQUDEHUAQINGYIDINGYAORENZHENYUEDUBENPIANWENZHANGYINWEITAKENENGJINIDAILAIWUQIONGWUJINDEZHISHI。

延伸阅读:

Tag标签:         
  • 专题推荐

About IT165 - 广告服务 - 隐私声明 - 版权申明 - 免责条款 - 网站地图 - 网友投稿 - 联系方式
本站内容来自于互联网,仅供用于网络技术学习,学习中请遵循相关法律法规