From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id E0B7B138010 for ; Fri, 29 Mar 2013 08:53:27 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id ABF92E073F; Fri, 29 Mar 2013 08:53:16 +0000 (UTC) Received: from smash-net.org (smash-net.org [176.9.155.157]) (using TLSv1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 5E3D3E0682 for ; Fri, 29 Mar 2013 08:53:15 +0000 (UTC) Received: from smash-net.org (localhost [127.0.0.1]) by smash-net.org (Postfix) with ESMTP id D993427A0050 for ; Fri, 29 Mar 2013 09:53:13 +0100 (CET) Received: by smash-net.org (Postfix, from userid 65534) id C3C9527A020C; Fri, 29 Mar 2013 09:53:13 +0100 (CET) X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on heimdall X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED autolearn=disabled version=3.3.2 Received: from [192.168.0.17] (f051097107.adsl.alicedsl.de [78.51.97.107]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smash-net.org (Postfix) with ESMTPSA id B2EB927A0050 for ; Fri, 29 Mar 2013 09:53:11 +0100 (CET) Message-ID: <51555677.1050507@smash-net.org> Date: Fri, 29 Mar 2013 09:53:11 +0100 From: =?ISO-8859-1?Q?Norman_Rie=DF?= User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130326 Thunderbird/17.0.4 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] How to prevent a dns amplification attack References: <51540497.5020008@smash-net.org> <5154A1BE.7010308@gmail.com> <201303290049.23399.peter@humphrey.ukfsn.org> In-Reply-To: <201303290049.23399.peter@humphrey.ukfsn.org> X-Enigmail-Version: 1.5.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: ClamAV using ClamSMTP X-Archives-Salt: 001c678c-d3eb-4d31-834c-4e4ce4ec3275 X-Archives-Hash: a19e3acc79a6cef39d231f885e98d014 Am 29.03.2013 01:49, schrieb Peter Humphrey: > On Thursday 28 March 2013 20:53:49 Paul Hartman wrote: > > > >> In my case, my ISP's DNS servers are slow (several seconds to reply), > >> fail randomly when they should resolve, return an IP (which goes to > >> their ad-laden "helper" website if you are using a web browser) when > >> they should instead return nxdomain, and they have openly admitted to > >> selling customer DNS lookup history to marketers for targeted > >> advertising. > > > > That is just evil. Have you no alternative to this ISP? > > > > -- > > Peter > > > Like free and open DNS servers? ;-) Like the one i am talking about and was told it was unnessesary crap? Norman