DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

Are Drayteks susceptible to DNS amplification attacks?

  • roga
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
10 Oct 2013 11:40 #77927 by roga
Are Drayteks susceptible to DNS amplification attacks? was created by roga
In general do Drayteks act as DNS servers via the WAN port?

I have just recd an email from my ISP detailing the problem described here: http://wiki.aa.org.uk/Category:Open_DNS_Resolvers

btw the models I am dealing with include: 2820, 2830, 2860

Please Log in or Create an account to join the conversation.

More
10 Oct 2013 22:19 #77937 by jedi98
Replied by jedi98 on topic Re: Are Drayteks susceptible to DNS amplification attacks?
Mine do NOT resolve DNS on the wan side. I have 2 2820s & a 2800.

Please Log in or Create an account to join the conversation.

More
20 Oct 2013 21:29 #78026 by admin
Replied by admin on topic Re: Are Drayteks susceptible to DNS amplification attacks?
The Vigor does not operate/provide a DNS server, a recursive DNS function, authoritative DNS or DNS proxy from the WAN.. so I'd guess not :-)
It does act as a DNS proxy for LAN-side clients, but doesn't resolve itself.

I think this comment of theirs is a bit curious:

"It is quite common for DSL routers to respond to these DNS requests on the WAN side "

Surely not ?

Forum Administrator

Please Log in or Create an account to join the conversation.

  • roga
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
21 Oct 2013 10:23 #78030 by roga
Replied by roga on topic Re: Are Drayteks susceptible to DNS amplification attacks?
Thanks both for your replies.

It seems some routers do cache DNS on the WAN side, but I'm pleased that drateks don't.

regards

Roga

Please Log in or Create an account to join the conversation.

Moderators: Sami