Date of Work: 11/01/2006
Start Time: 0700
End Time:
RPoP(s):
Locations Affected:
Description of work to be performed:
Effective November 1, 2006, NCREN name servers will no longer respond to recursive queries from non-customer networks. Recursive DNS servers can be and are exploited in denial of service attacks. Network operators now generally agree that access to recursive DNS servers should be limited to users within an operator's own network.
This change will have the following effects:
- Only computers using connections within NCREN's network (using IP addresses provided by or routed by NCREN) will be able to use NCREN name servers for recursive queries.
- Recursive queries from outside of the NCREN network will be denied access. Their requests will time out or otherwise fail to receive a response. This will only affect users who are not NCREN-connected AND have manually configured their system to use NCREN name servers.
For an excellent overview of recursive DNS queries and the risks involved, please visit:
http://www.us-cert.gov/reading_room/DNS-recursion033006.pdf
Please contact Ed Winstead (winstead@ncren.net, 919-248-1818) with any questions or concerns regarding this change.
If you have any questions please contact us at 919-248-1111 or trouble@ncren.net
_______________________________________________
Net-info mailing list
Net-info@list.mcnc.org
https://list.mcnc.org/mailman/listinfo/net-info
Received on Mon Oct 16 15:42:42 2006
This archive was generated by hypermail 2.1.8 : 10/16/06 EDT