topic Re: DNS Attack? in Network Security

DNS Attack?

ahmad82pkn — Mon, 11 Mar 2019 18:18:49 GMT

Hi, My internet suddenly stopped working, i checked connection in Cisco Firewall (PIX-515E, 128 MB RAM, CPU Pentium II 433 MHz) and there were thousands of DNS queries from DNS server, usually they are not so high, Both secondary and Backup DNS does so, How can i secure my firewall with this kind of attacks? i needed to do failover my firewall to break the sessions and my internet started working, below is output from firewall, any way to fix this?

UDP out 192.36.148.17:53 in 10.110.5.34:52538 idle 0:00:01 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:52538 idle 0:00:01 flags -

UDP out 192.5.5.241:53 in 10.110.5.34:64594 idle 0:00:01 flags -

UDP out 128.63.2.53:53 in 10.110.5.34:52733 idle 0:00:01 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:55807 idle 0:00:02 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:55807 idle 0:00:02 flags -

UDP out 128.63.2.53:53 in 10.110.5.34:63654 idle 0:00:03 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:55689 idle 0:00:04 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:55689 idle 0:00:04 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:52538 idle 0:00:05 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:52538 idle 0:00:05 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:55807 idle 0:00:06 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:55807 idle 0:00:06 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:55689 idle 0:00:08 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:55689 idle 0:00:08 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:52538 idle 0:00:09 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:64678 idle 0:00:09 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:65234 idle 0:00:09 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:65234 idle 0:00:09 flags -

UDP out 192.5.5.241:53 in 10.110.5.34:61208 idle 0:00:09 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:55807 idle 0:00:10 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:58868 idle 0:00:10 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:58868 idle 0:00:10 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:55689 idle 0:00:12 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:54118 idle 0:00:12 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:54118 idle 0:00:12 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:52538 idle 0:00:12 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:65234 idle 0:00:13 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:65234 idle 0:00:13 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:55807 idle 0:00:14 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:58868 idle 0:00:14 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:58868 idle 0:00:14 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:57028 idle 0:00:15 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:57028 idle 0:00:15 flags -

UDP out 192.5.5.241:53 in 10.110.5.34:55689 idle 0:00:16 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:54118 idle 0:00:16 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:54118 idle 0:00:16 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:58587 idle 0:00:16 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:58587 idle 0:00:16 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:65234 idle 0:00:17 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:56121 idle 0:00:17 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:56121 idle 0:00:17 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:58868 idle 0:00:18 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:58415 idle 0:00:18 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:58415 idle 0:00:18 flags -

UDP out 192.33.4.12:53 in 10.110.5.34:59444 idle 0:00:18 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:57028 idle 0:00:19 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:57028 idle 0:00:19 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:54118 idle 0:00:20 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:58587 idle 0:00:20 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:58587 idle 0:00:20 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:60752 idle 0:00:20 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:60752 idle 0:00:20 flags -

UDP out 128.9.0.107:53 in 10.110.5.34:65234 idle 0:00:20 flags -

UDP out 128.9.0.107:53 in 10.110.5.34:61849 idle 0:00:21 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:56121 idle 0:00:22 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:56121 idle 0:00:22 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:58868 idle 0:00:23 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:58415 idle 0:00:23 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:58415 idle 0:00:23 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:59505 idle 0:00:23 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:59505 idle 0:00:23 flags -

UDP out 192.203.230.10:53 in 10.110.5.34:52856 idle 0:00:24 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:57028 idle 0:00:24 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:54118 idle 0:00:25 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:58587 idle 0:00:25 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:60752 idle 0:00:25 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:60752 idle 0:00:25 flags -

UDP out 128.63.2.53:53 in 10.110.5.34:63727 idle 0:00:26 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:56121 idle 0:00:26 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:57681 idle 0:00:26 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:57681 idle 0:00:26 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:58415 idle 0:00:27 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:55130 idle 0:00:27 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:49620 idle 0:00:27 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:49620 idle 0:00:27 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:59505 idle 0:00:27 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:59505 idle 0:00:27 flags -

UDP out 192.5.5.241:53 in 10.110.5.34:57028 idle 0:00:28 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:62792 idle 0:00:28 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:62792 idle 0:00:28 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:52856 idle 0:00:12 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:52856 idle 0:00:12 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:58587 idle 0:00:29 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:60752 idle 0:00:29 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:62476 idle 0:00:29 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:62476 idle 0:00:29 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:56121 idle 0:00:29 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:57681 idle 0:00:30 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:57681 idle 0:00:30 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:58415 idle 0:00:30 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:49620 idle 0:00:31 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:49620 idle 0:00:31 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:59505 idle 0:00:31 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:62792 idle 0:00:32 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:62792 idle 0:00:32 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:52856 idle 0:00:16 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:52856 idle 0:00:16 flags -

UDP out 192.33.4.12:53 in 10.110.5.34:60752 idle 0:00:33 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:62476 idle 0:00:33 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:62476 idle 0:00:33 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:58327 idle 0:00:33 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:58327 idle 0:00:33 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:57681 idle 0:00:34 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:60797 idle 0:00:34 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:49620 idle 0:00:35 flags -

UDP out 128.8.10.90:53 in 10.110.5.34:59505 idle 0:00:35 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:62792 idle 0:00:36 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:52856 idle 0:00:20 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:62476 idle 0:00:37 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:58327 idle 0:00:37 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:58327 idle 0:00:37 flags -

UDP out 192.33.4.12:53 in 10.110.5.34:57681 idle 0:00:38 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:50926 idle 0:00:38 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:50926 idle 0:00:38 flags -

UDP out 192.203.230.10:53 in 10.110.5.34:49620 idle 0:00:39 flags -

UDP out 192.5.5.241:53 in 10.110.5.34:55130 idle 0:00:39 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:62792 idle 0:00:40 flags -

UDP out 192.33.4.12:53 in 10.110.5.34:52856 idle 0:00:40 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:49777 idle 0:00:40 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:49777 idle 0:00:40 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:53760 idle 0:00:41 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:53760 idle 0:00:41 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:62476 idle 0:00:41 flags -

UDP out 128.8.10.90:53 in 10.110.5.34:55169 idle 0:00:41 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:58327 idle 0:00:42 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:50926 idle 0:00:43 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:50926 idle 0:00:43 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:56164 idle 0:00:43 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:56164 idle 0:00:43 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:49777 idle 0:00:45 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:49777 idle 0:00:45 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:53760 idle 0:00:45 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:53760 idle 0:00:45 flags -

UDP out 128.8.10.90:53 in 10.110.5.34:58327 idle 0:00:45 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:59411 idle 0:00:46 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:59411 idle 0:00:46 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:53847 idle 0:00:35 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:53847 idle 0:00:35 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:50926 idle 0:00:47 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:56164 idle 0:00:47 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:56164 idle 0:00:47 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:49777 idle 0:00:49 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:53760 idle 0:00:49 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:60142 idle 0:00:49 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:60142 idle 0:00:49 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:59411 idle 0:00:50 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:59411 idle 0:00:50 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:53847 idle 0:00:46 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:53847 idle 0:00:39 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:50926 idle 0:00:50 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:56164 idle 0:00:51 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:49777 idle 0:00:52 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:53760 idle 0:00:52 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:60142 idle 0:00:53 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:60142 idle 0:00:53 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:59411 idle 0:00:54 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:53847 idle 0:00:43 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:53834 idle 0:00:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:53834 idle 0:00:54 flags -

UDP out 192.203.230.10:53 in 10.110.5.34:56164 idle 0:00:54 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:61789 idle 0:00:55 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:60142 idle 0:00:57 flags -

UDP out 192.112.36.4:53 in 10.110.5.34:59411 idle 0:00:57 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:53847 idle 0:00:39 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:53834 idle 0:00:58 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:53834 idle 0:00:58 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:57439 idle 0:00:59 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:57439 idle 0:00:59 flags -

UDP out 192.33.4.12:53 in 10.110.5.34:60142 idle 0:01:00 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:53834 idle 0:01:02 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:57439 idle 0:01:03 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:57439 idle 0:01:03 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:51555 idle 0:01:03 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:51555 idle 0:01:03 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:58854 idle 0:01:04 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:58854 idle 0:01:04 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:65509 idle 0:01:04 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:65509 idle 0:01:04 flags -

UDP out 128.8.10.90:53 in 10.110.5.34:53834 idle 0:01:05 flags -

UDP out 192.203.230.10:53 in 10.110.5.34:58821 idle 0:01:05 flags -

UDP out 128.8.10.90:53 in 10.110.5.34:58821 idle 0:01:06 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:57439 idle 0:01:07 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:51555 idle 0:01:07 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:51555 idle 0:01:07 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:58854 idle 0:01:08 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:58854 idle 0:01:08 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:65509 idle 0:01:08 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:65509 idle 0:01:08 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:57124 idle 0:00:16 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:61208 idle 0:00:00 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:61208 idle 0:01:08 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:52882 idle 0:01:09 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:52882 idle 0:01:09 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:60277 idle 0:01:09 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:60277 idle 0:01:09 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:57439 idle 0:01:11 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:51555 idle 0:01:11 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:58854 idle 0:01:12 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:65509 idle 0:01:12 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:61208 idle 0:00:04 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:61208 idle 0:00:04 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:52882 idle 0:01:13 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:52882 idle 0:01:13 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:60277 idle 0:01:13 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:60277 idle 0:01:13 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:54629 idle 0:01:14 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:54629 idle 0:01:14 flags -

UDP out 192.112.36.4:53 in 10.110.5.34:51555 idle 0:01:15 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:61498 idle 0:01:15 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:61498 idle 0:01:15 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:51924 idle 0:01:15 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:51924 idle 0:01:15 flags -

UDP out 192.33.4.12:53 in 10.110.5.34:58854 idle 0:01:15 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:65509 idle 0:01:16 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:61208 idle 0:00:08 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:50820 idle 0:01:16 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:52882 idle 0:01:17 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:60277 idle 0:01:17 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:59002 idle 0:01:17 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:59002 idle 0:01:17 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:54629 idle 0:01:18 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:54629 idle 0:01:18 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:62455 idle 0:01:18 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:62455 idle 0:01:18 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:61498 idle 0:01:19 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:61498 idle 0:01:19 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:51924 idle 0:01:19 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:51924 idle 0:01:19 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:61208 idle 0:00:00 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:52882 idle 0:01:20 flags -

UDP out 128.8.10.90:53 in 10.110.5.34:60277 idle 0:01:20 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:59002 idle 0:01:21 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:59002 idle 0:01:21 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:52937 idle 0:01:21 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:52937 idle 0:01:21 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:54629 idle 0:01:22 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:62455 idle 0:01:22 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:62455 idle 0:01:22 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:55169 idle 0:00:30 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:55169 idle 0:00:30 flags -

UDP out 192.112.36.4:53 in 10.110.5.34:63222 idle 0:01:23 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:61498 idle 0:01:23 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:51924 idle 0:01:23 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:63976 idle 0:01:24 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:63976 idle 0:01:24 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:60643 idle 0:01:24 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:60643 idle 0:01:24 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:59002 idle 0:01:25 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:52937 idle 0:01:25 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:52937 idle 0:01:25 flags -

UDP out 128.8.10.90:53 in 10.110.5.34:54629 idle 0:01:25 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:62455 idle 0:01:26 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:55169 idle 0:00:34 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:55169 idle 0:00:34 flags -

UDP out 192.203.230.10:53 in 10.110.5.34:61498 idle 0:01:27 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:51924 idle 0:01:27 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:57816 idle 0:01:28 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:57816 idle 0:01:28 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:55364 idle 0:01:28 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:55364 idle 0:01:28 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:54983 idle 0:01:29 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:63976 idle 0:01:29 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:63976 idle 0:01:29 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:60643 idle 0:01:29 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:60643 idle 0:01:29 flags -

UDP out 128.9.0.107:53 in 10.110.5.34:59002 idle 0:01:29 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:52937 idle 0:01:30 flags -

UDP out 128.8.10.90:53 in 10.110.5.34:53272 idle 0:01:30 flags -

UDP out 192.112.36.4:53 in 10.110.5.34:62455 idle 0:01:30 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:55169 idle 0:00:38 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:59444 idle 0:00:09 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:59444 idle 0:00:09 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:57816 idle 0:01:32 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:57816 idle 0:01:32 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:55364 idle 0:01:32 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:55364 idle 0:01:32 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:53272 idle 0:01:32 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:53272 idle 0:01:19 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:63976 idle 0:01:33 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:60643 idle 0:01:33 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:52937 idle 0:01:33 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:49608 idle 0:01:34 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:49608 idle 0:01:34 flags -

UDP out 128.63.2.53:53 in 10.110.5.34:55169 idle 0:01:34 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:59444 idle 0:00:13 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:59444 idle 0:00:13 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:65463 idle 0:01:35 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:65463 idle 0:01:35 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:57816 idle 0:01:36 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:55364 idle 0:01:36 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:53272 idle 0:01:23 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:53272 idle 0:01:23 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:58009 idle 0:01:36 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:58009 idle 0:01:36 flags -

UDP out 128.8.10.90:53 in 10.110.5.34:63976 idle 0:01:36 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:61098 idle 0:01:37 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:61098 idle 0:01:37 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:56011 idle 0:01:37 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:56011 idle 0:01:37 flags -

UDP out 192.203.230.10:53 in 10.110.5.34:60643 idle 0:01:37 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:49608 idle 0:01:38 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:49608 idle 0:01:38 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:53385 idle 0:01:38 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:53385 idle 0:00:09 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:59444 idle 0:00:17 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:65463 idle 0:01:39 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:65463 idle 0:01:39 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:51339 idle 0:01:39 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:51339 idle 0:01:39 flags -

UDP out 169.254.169.226:137 in 10.110.5.34:137 idle 0:01:29 flags -

UDP out 192.5.5.241:53 in 10.110.5.34:57816 idle 0:01:39 flags -

UDP out 128.63.2.53:53 in 10.110.5.34:55364 idle 0:01:40 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:53272 idle 0:01:27 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:58009 idle 0:01:40 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:58009 idle 0:01:40 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:64566 idle 0:01:40 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:64566 idle 0:01:40 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:50876 idle 0:01:40 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:50876 idle 0:01:40 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:61098 idle 0:01:41 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:61098 idle 0:01:41 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:56011 idle 0:01:41 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:56011 idle 0:01:41 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:49608 idle 0:01:42 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:53385 idle 0:00:01 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:53385 idle 0:00:01 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:57124 idle 0:00:28 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:57124 idle 0:00:17 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:49716 idle 0:01:42 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:49716 idle 0:01:42 flags -

UDP out 192.203.230.10:53 in 10.110.5.34:59444 idle 0:01:43 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:65463 idle 0:01:43 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:51339 idle 0:01:43 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:51339 idle 0:01:43 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:53272 idle 0:01:19 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:58009 idle 0:01:44 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:64566 idle 0:01:44 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:64566 idle 0:01:44 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:50876 idle 0:01:44 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:50876 idle 0:01:44 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:53545 idle 0:01:44 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:53545 idle 0:01:44 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:53884 idle 0:01:44 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:53884 idle 0:01:44 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:61098 idle 0:01:45 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:56011 idle 0:01:45 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:57295 idle 0:01:45 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:57295 idle 0:01:45 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:49608 idle 0:01:45 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:53385 idle 0:01:46 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:57124 idle 0:00:21 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:57124 idle 0:00:21 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:49716 idle 0:01:46 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:49716 idle 0:01:46 flags -

UDP out 128.9.0.107:53 in 10.110.5.34:65463 idle 0:01:46 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:51339 idle 0:01:47 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:50193 idle 0:01:47 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:50193 idle 0:01:47 flags -

UDP out 192.203.230.10:53 in 10.110.5.34:58009 idle 0:01:47 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:64566 idle 0:01:48 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:50876 idle 0:01:48 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:53545 idle 0:01:48 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:53545 idle 0:01:48 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:53884 idle 0:01:48 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:53884 idle 0:01:48 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:50149 idle 0:01:48 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:50149 idle 0:01:48 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:57735 idle 0:01:48 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:57735 idle 0:01:48 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:61098 idle 0:01:48 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:56011 idle 0:01:48 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:57295 idle 0:01:49 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:57295 idle 0:01:49 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:53385 idle 0:00:06 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:57124 idle 0:00:25 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:49716 idle 0:01:50 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:62054 idle 0:01:50 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:62054 idle 0:01:50 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:51339 idle 0:01:51 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:50193 idle 0:01:51 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:50193 idle 0:01:51 flags -

UDP out 192.33.4.12:53 in 10.110.5.34:64566 idle 0:01:51 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:50876 idle 0:01:51 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:53545 idle 0:01:52 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:53884 idle 0:01:52 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:50149 idle 0:01:52 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:50149 idle 0:01:52 flags -

UDP out 193.0.14.129:53 in 10.110.5.34:57735 idle 0:01:52 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:57735 idle 0:01:52 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:57347 idle 0:01:52 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:57347 idle 0:01:52 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:61907 idle 0:01:12 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:61907 idle 0:01:12 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:52537 idle 0:00:50 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:52537 idle 0:00:50 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:57295 idle 0:01:53 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:49650 idle 0:01:53 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:49650 idle 0:01:53 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:64201 idle 0:01:53 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:64201 idle 0:01:53 flags -

UDP out 192.203.230.10:53 in 10.110.5.34:57124 idle 0:01:53 flags -

UDP out 198.41.0.4:53 in 10.110.5.34:49716 idle 0:01:54 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:62054 idle 0:01:54 flags -

UDP out 198.32.64.12:53 in 10.110.5.34:62054 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:64678 idle 0:00:08 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:64678 idle 0:00:08 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:60993 idle 0:01:53 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:60993 idle 0:01:53 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:50581 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:50581 idle 0:01:54 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:64318 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:64318 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:65122 idle 0:01:54 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:65122 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:65454 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:65454 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:53436 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:53436 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:60175 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:60175 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:51176 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:51176 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:64594 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:64594 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:61255 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:61255 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:55130 idle 0:00:25 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:55130 idle 0:00:25 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:49590 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:49590 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:61849 idle 0:00:12 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:61849 idle 0:00:12 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:53867 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:53867 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:61177 idle 0:01:54 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:61177 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:52580 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:52580 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:60797 idle 0:00:48 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:60797 idle 0:00:36 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:63727 idle 0:00:16 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:63727 idle 0:00:16 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:54983 idle 0:01:25 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:54983 idle 0:01:25 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:62917 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:62917 idle 0:01:54 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:63222 idle 0:00:21 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:63222 idle 0:00:13 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:59902 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:59902 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:58821 idle 0:00:55 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:58821 idle 0:00:55 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:53144 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:53144 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:63654 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:63654 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:49296 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:49296 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:61687 idle 0:00:55 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:61687 idle 0:00:55 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:49204 idle 0:01:42 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:49204 idle 0:01:30 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:60409 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:60409 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:61789 idle 0:00:52 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:61789 idle 0:00:52 flags -

UDP out 202.12.27.33:53 in 10.110.5.34:49984 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:49984 idle 0:01:54 flags -

UDP out 192.36.148.17:53 in 10.110.5.34:55227 idle 0:01:54 flags -

UDP out 192.58.128.30:53 in 10.110.5.34:55227 idle 0:01:54 flags -

Re: DNS Attack?

Panos Kampanakis — Fri, 30 Jul 2010 21:05:04 GMT

In the static that you have for your DNS server you can set the connection limits. You can set the connection limit to be a little higher that what your normal connection numbers are and then the PIX will not let conns to your server be higher.

Keep in mind though that if the issue is "too much traffic" that fills up your pipe there is not much you can do on the PIX as the pipe is already oversubscribed. Only the ISP can help you then.

I hope it helps.

Re: DNS Attack?

Magnus Mortensen — Fri, 30 Jul 2010 23:53:10 GMT

Hi,

The servers your internal server are trying to hit are the root-servers:

128.63.2.53 is h.root-servers.net.
128.8.10.90 is d.root-servers.net.
128.9.0.107 is ns1.isi.edu.
192.112.36.4 is G.ROOT-SERVERS.NET.
192.33.4.12 is c.root-servers.net.
192.36.148.17 is i.root-servers.net.
192.5.5.241 is f.root-servers.net.
192.58.128.30 is j.root-servers.net.
193.0.14.129 is k.root-servers.net.
198.41.0.4 is a.root-servers.net.
202.12.27.33 is M.ROOT-SERVERS.NET.

I did a reverse lookup on the destinations and they appear to be the DNS root servers. Is your internal server configured for DNS recursion or is it set with DNS forwarders to your ISP's servers. If they are set to do recursion, the the traffic might not be all that abnormal. The firewall will leave UDP connections idle for up to 2 minutes by default. With DNS, the firewall will close the connection if a response is received on that DNS connection. Since these seem to be open for more than a few seconds I can only assume that no response was returned for the DNS request that created that connection.

A few things that can cause this... Assuming your DNS server is set for recursion...:

- Your request to the root server was dropped somewhere between the outside of your firewall and the root server

- The reply from the root server never came back or was dropped in transit.

I tested a few bogus requests to the root servers for non existent domains like oiajsoidjdas.com and I got a response back within a few seconds:

[19:44:26] [magnus@mag-mac /Users/magnus]$ nslookup oiajsoidjdas.om j.root-servers.net
Server: j.root-servers.net
Address: 192.58.128.30#53

Non-authoritative answer:
*** Can't find oiajsoidjdas.om: No answer

Since a response came back the UDP port/connection closed quickly. This leads me to believe that the firewall never saw a return answer from the root servers your machine had queried. Were any changes made upstream from your firewall (ACL/routing/ISP do anything) ? Is your server set for recursion?

- Magnus

Re: DNS Attack?

ahmad82pkn — Mon, 02 Aug 2010 14:22:47 GMT

Hi pkampana,

actually me not using static nat, DNS is getting PAT, it can be one option but i have to purchase public ip for that,

and about bandwidth i have sufficient, bandwidth doesnt max out, i have plenty free even when this issue occur,

Re: DNS Attack?

ahmad82pkn — Mon, 02 Aug 2010 14:25:04 GMT

Let me check with system admin team, they really failed to fix it til now, so i thought to do some thing on firewall level.

will be back with updates.