Network Solutions Under Large-Scale DDoS Attack 139
netizen writes "CircleID is reporting a large-scale DDoS attack affecting all of Network Solutions' name servers for the past 48 hours, potentially affecting millions of websites and emails around the world hosting their domain names on the company's servers. The NANOG mailing list indicates that it is due to a very large-scale UDP/53 DDoS which Network Solutions has also confirmed: 'There is a spike in DNS query volumes that is causing latency for the delay in web sites resolving. This is a result of a DDOS attack. We are taking measures to mitigate the attack and speed up queries.""
Re:Someone should be fired! (Score:5, Insightful)
Do you even know what a DDoS attack is?
If you did, you'd realize you can't both operate a service online, and be immune. The two things are mutually exclusive.
The best you can do is slap the attack down when you see one happening. Even that isn't exactly easy. Banning a few million IP addresses tends to be a problem all by itself.
Re:Downright Gibsonian (Score:5, Insightful)
You might be getting old, but reporting malicious attacks like the weather is a good thing. Some will get tired of it, but the good thing is that perhaps the average joe public user will become aware of how vulnerable their on-line experience and computer are. Fighting DDoS attacks has been done successfully, but it takes a lot of work, and a lot of hardware. There are a couple of stories on the Internet about such.
The most recent botnet reports show that 100s of millions of PCs are infected with via a MS vulnerability [scmagazineus.com] that was fixed with a patch last year.
We need to see the awareness level increased, and some serious attention to detail on the patch/upgrade cycles.
Re:Slashdotting will help how? (Score:2, Insightful)
Maintain a cache of domain records from an authoritative source (which can be itself, in the case of the 11 root servers or internal network domain name servers).
Oh, you were trying to make the GP look dumb. Failure.
Re:hummm (Score:2, Insightful)
The best opportunity shares space with the greatest risk.
Re:One must ask... (Score:1, Insightful)
Does Network Solutions have any network solutions?
Be economical:
Does Network Solutions have any?
Good (Score:3, Insightful)
Netsol sux anyway.
Anyone else notice how they send out notices with the FROM: address forged as the TO address? Most people would get sued for fraud.
Re:hummm (Score:3, Insightful)
Many (inexperienced) linux admins like to reboot their boxen too remember
I've seen many times when issues required a reboot of a *nix machine.
The latest one I'm dealing with is a machine that completely drops off the network (no pings, etc.). Restarting services has no effect, so we suspect it is hardware, but that doesn't make a lot of sense, because the obvious culprit (the network cards) have physical redundancy and pass all diagnostics. We've also swapped out cards, but still see the same thing. The next step is to move to a card that uses a different driver, but that's something that requires change control to get involved.
It only happens about once every two months, and since the machine itself is part of a cluster, it doesn't hurt productivity much, but it is annoying.