12–13 May 2013
Burlington Hotel
Europe/Dublin timezone

Self-Serve Open Resolver Testing

12 May 2013, 14:40
20m
Burlington Hotel

Burlington Hotel

Connaught Suite, Upper Leeson Street, Dublin 4, Ireland
OARC Public Workshop DNS Reflection Attacks

Speaker

Duane Wessels (Verisign)

Description

Recent attacks bring renewed attention to the millions of open resolvers on the Internet. Discovery of open resolvers has traditionally been done by wide-scale surveys of known name servers or address space. Such surveys suffer from a few problems: (1) probing traffic may be seen as abusive; (2) the desire to provide open resolver addresses to the "good guys" but keep them away from the "bad guys"; and (3) big surveys take a long time and are updated on the surveyor's schedule. Verisign has developed a new tool that allows network administrators to scan their own address space for open resolvers at their own convenience and quickly view the results.

Primary author

Duane Wessels (Verisign)

Presentation materials