跳至主要内容

May 19 large-scale failures in the whole continent DNS server DNS attacks

May 19 large-scale failures in the whole continent DNS server DNS attacks

Started on the 18th, the famous free dns service provider server 6 by the attack began. Dnspod website for many Domain Name Service, which includes video and audio storm.

On the 18th at 20:33:59. In an unprecedented attack of the large flow of dnspod began 6 to resolve server failures, a large number of sites do not have access to intermittent, including many well-known domestic websites, of course, I also include the unknown site. The first wave of attack traffic in around 9:30 p.m. peak flow of more than 10Gbps, the following chart, it is necessary to know the heart of the engine room of a telecommunications bandwidth at most only dozens of G

5月19日大陆DNS大规模故障始末 DNS服务器被攻击



May 19 large-scale failures in the whole continent DNS server DNS attacks

Evening on the 18th, due to depletion of the entire room dnspod almost one third of the bandwidth resources, in order not to affect other users of the engine room, dnspod telecommunications main dns server forced offline

On the 19th night, another round of high-intensity attacks, dnspod service completely interrupted, as a result of Storm video player client can not resolve the server IP, the network began to suppliers to resolve the dns server to send the request of the local operators plug the dns server.

19 around 21:00 pm, Zhejiang Telecom to start dns paralyzed within two hours after Beijing, Tianjin, Shanghai, Hebei, Shanxi, Inner Mongolia, Liaoning, Jilin, Jiangsu, Heilongjiang, Zhejiang, Anhui, Hubei, Guangxi, Guangdong and other regions have paralyzed the dns.

At 0:00 before the operators in some areas have been dealt with, will storm Ip video server dns cache or the prohibition of adding the domain name resolution, network began to recover.

So far, there are many areas there are problems dns services, dnspod also still not fully recovered.

Later learned that the incident was merely the chief culprit is the same service in the use of a私服dnspod site, the site of the "peer" of its web server in case of attack is not to spend a lot of chickens to their dns service providers have been dnspod frenzied attacks, the scale of the people are really scared.

According to the telecommunications sector, said at 21:06 on May 19, as a result of the storm video client software flaw in the domain name in the Storm video server work authorized under unusual circumstances, leading to installation of the software launched frequent Internet Terminal DNS request DNS caused congestion, resulting in a large number of users visit the Web site or page to open slowly. According to the Group of feedback information, the various operators across the country during this period also occurred in a similar failure. The rare major standstill of the Internet, many people said, as if back to the end of 2006. At that time, the earthquake in Taiwan caused by undersea fiber optic communications disruptions, the Chinese mainland to visit the quality of the Internet have been seriously affected. This caused the software failure of the Internet across the country paralyzed, shocked the industry, but also a lot of unhappy users. There are Internet users, said network operators can not be in accordance with the contract to provide network services, network operators will claim. >> Comment network information, Luoyang life: http://luoyanglife.com/  >> Luoyang discount forum I love life: http://bbs.luoyanglife.com/  >> Henan entrance examination Network: http://www.edu-ha.com/index.php  >> just one sentence: http://log-by-me.blogspot.com/

Standstill this network, internet security again sounded the alarm.

Can not be normal friends can try to resolve opendns, the network settings for dns address modifications to 208.67.222.222 and 208.67.220.220

This article comes from CKT'S BLOG

For yesterday, Jiangsu, Anhui, Guangxi, Hainan, Gansu, Zhejiang Province, six of the emergence of a network failure, the Ministry of Industry and Information Communications Security Bureau to convene to deal with the National Computer Emergency Response Coordination Center, telecommunications Research Institute, China Telecom Group, audio-visual and other storm held an emergency meeting.
Allegedly been identified as the cause of the accident is the fault line DNS domain name. At the same time, Storm video released on the incident said the official announcement, is also one of the victims of the storm. FENG Xin said Storm CEO audio and video will be a backup domain name servers, to avoid similar problems arise in the software, the Internet security mechanism to increase the adjustment of the technology will work overtime storm in three days to complete the job.

Following is the full text of Storm video bulletins:

At 21:50 on May 19 onwards, Jiangsu, Anhui, Guangxi, Hainan, Gansu, and Zhejiang provinces reporting users slow down or visit the Web site can not be accessed, the current network of six provinces have returned to normal.

May 20, Industry and Information Security Bureau of the Ministry of Communications to convene to deal with the National Computer Emergency Response Coordination Center, telecommunications Research Institute, China Telecom Group, to participate in audio-visual and other storm bear meetings, have been identified as the cause of the accident is the Department of DNS domain name resolution failure, network failure caused by a number of sites affected, is also one of the victims of the storm. because of the enormous volume of users, resulting in traffic to the Internet caused a certain amount of burden, in this case by a larger concern.

After the meeting, said China Telecom, DNS server is the weakest link in the future will be strengthened to guard against, prevent similar incidents from occurring. FENG Xin said Storm CEO audio and video will be a backup domain name servers, to avoid similar problems in the software of the Internet mechanism to increase the adjustment of security considerations, the technology will work overtime storm in three days to complete the job.

Storm will be audio-visual and China Telecom, China Unicom and other operators service providers, to enhance the technical level of communication and co-operation and build a safe environment for the flow of the Internet.

Storm video and audio between China Telecom: Multi-Province, the reasons for slow speed http://mygogou.com/mm-734/

评论

此博客中的热门博文

6岁小朋友在PSP上看到不该看的东西

美国佛州的一位母亲Thamtha Tovar为自己六岁的儿子在Manatee的沃尔玛购买了一个礼物,一台全新的PSP, 然而当这位六岁的小朋友打开此PSP的时候,映入眼帘的却是一位"一丝不挂"的美女,惊恐之下,小朋友向自己的母亲哭诉了自己的遭遇。 伟 大的母亲听说此事勃然大怒,愤然找到沃尔玛的负责人要求对此事件作出合理解释,为何刚购买的PSP里的记忆卡会有"美女"在里面。沃尔玛的工作人员如此说 道:"呃,你把机器带来过,我们把卡帮你取出来,然后我们会给您儿子免费提供一个新的游戏。"这位母亲说:"我很乐意,但是恐怕你们没有明白我说的话。" 沃尔玛的一位发言人称他们正在调查为何发生此事,寻求解决此问题,而Tovar女士则要求更换一台全新的PSP并要求沃尔玛为此事道歉。 ------------------ 洛阳生活信息点评网:http://luoyanglife.com/ 洛阳生活信息,我爱打折论坛:http://bbs.luoyanglife.com/ 河南招生考试网:http://www.edu-ha.com/  

照着做,你的人生一定很顺利!

  01.犯了错误就该诚实地认错——狡辩、诿过只会害了自己。   02. 朋友 之间要保持距离——这样的 友谊 才能长久。     03.钱追人,人追健康——有了健康,还怕挣不到钱么?     04.别轻易转行——转行的风险很高,最好不要轻率为之。     05.适度地抬高身价——在就业市场中,人也是一种商品。     06.把敬业变成 习惯 ——从长期看是为了自己。     07.运用累积法壮大资产——不求快,不求多,不中断。     08.忍一时,争千秋形势比人强时,必须忍。     09.与其你死我活,不如你活我也活——这就是双赢,是良性竞争。     10.以"播种"的 心态 经营人际关系——种子播得越早越坚韧。     11.做事切勿率性而为——率性而为只会害了自己。     12.遇到魔鬼型的主管时——接受他的磨练可让你的 性格 越来越坚韧。     13.不要当众和主管吵架——那会让你无路可走,只有走人。     14.向不同行业的人学习新知识——记住,要用请教的 态度 。     15.所有的困难都是好事——这是老天爷在磨练你,目的是把重任交给你。     16.用吃亏就是占便宜的心态 做人 做事——那样你就可以迅速长大。     17.不要在失意者面前谈论你的得意——那样 伤害 你的人际关系。     18.不要小看守时这件事——守时是对别人的尊重。     19.用 时间 来看人——时间是检验大师。     20.用打听来看人——把获得的信息汇总,就可以了解那个人。     21.建立一个朋友档案——以免人到用时方恨少。     22.扩大交友圈——主动出击,不要等别人上门找你。     23.保持交友的弹性——敌人也可以变成朋友。     24.要交 喜欢 "修理"你的朋友——这种朋友是你的 人生 导师。   25.毛遂自荐,好处多多——让别人看到你,知道你的存在,知道你的能力。     26.小心突然升温的 友情 ——对待这种友情的正确态度是:不推不迎,礼尚往来。     27.做老二,不做老大——老大没当好,容易变成老三老四。     28.做人要中规中矩——目的是赢得他人的尊重和信赖。   ...

FTP服务器关于断点续传权限的防范问题

FTP服务器关于断点续传权限的防范问题    假设ftp服务器中存在一个文件Readme.txt,文件大小为1000 bytes,连接上这个ftp服务器(假设我有写权限,ftp服务器是支持断点再传的),我本地中也有一个叫Readme.txt的文件,文件大小为 500 bytes。好了,我开始做坏事。    1、连接上这个ftp服务器(用系统自带的 ftp://ftp.exe/,在内网的可能无法使用,因为 ftp://ftp.exe/用的是port模式)    2、dir(查看Readme.txt大小,确定了是1000 bytes)    3、quote rest 1000(告诉ftp服务器我将要传送的文件是从文件位置1000开始)    4、send Readme.txt    5、dir(再次查看Readme.txt大小,现在Readme。txt变成1500 bytes了)    为什么Readme.txt会变大了?很简单,因为我本地的那个Readme.txt的500字节上传成功,并写入到ftp服务器中存在的那个 1000 bytes的Readme.txt文件中了。问题是出在第二条命令,如果没有第二条命令,我的第4个命令(Send Readme.txt),就会得到一个Permission Deny的错误,第二条命令是让ftp服务器信任我们将要进行一个断点再传的操作,如果没有第二条命令,ftp服务器将以为我们进行的是一个复盖原文件的操作(复盖原文件操作需要另外的权限才可以进行)。    这个问题只是在允许断点再传的FTP服务中存在,但现在90%的FTP服务程序都是允许断点再传的,所以这问题在普遍的FTP服务器都会存在。    防范方法:    如果一定需要给用户上传权限的话,最好的防范方法是每个用户都给他建立一个目录,将那个用户的权限完全锁在这个目录内,那么用户就没有权限可以查看其它用户的目录,也就是说无法造成以上所说的破坏。