Thanks @JaredBusch

@bnrstnr said in Pi-hole server involved in a 'DNS Amplification' DDOS Attack:

@DustinB3403 didn't you say the method above would only work for devices on the Pi-Hole's LAN?

The method linked by someone else would, yes. As it's impractical to try to do said linked approach for the open internet.

Again, it's what you would do, but isn't practical because of your scale.

Post 18.

@DustinB3403 said in Pi-hole server involved in a 'DNS Amplification' DDOS Attack:

But the reported issue is that these request appear to come from your devices. IE they are spoofed or are legitimately coming from your trusted network.

Can you setup ingress filtering for this?

This is the approach proposed by Curtis.

@Curtis said in Pi-hole server involved in a 'DNS Amplification' DDOS Attack:

https://freek.ws/2017/03/18/blocking-dns-amplification-attacks-using-iptables/

More details on the Memcached Amplification Attack.

Updated map - while the effects are lessened,.. they coverage is nearly the same.

0_1477484733181_2016-10-26 08_23_03-Level3 outage_ Current problems and outages _ Down Detector.png

Chinese electronics firm Hangzhou Xiongmai is set to recall swathes of webcams after they were compromised by the Mirai botnet.
 
Mirai exploits the low security standards of internet-connected devices, from routers to webcams, and after enslaving them with malware uses their network connections to launch DDoS attacks, such as that hobbling Dyn's DNS services last week.

Sauce of regret: http://www.theregister.co.uk/2016/10/24/chinese_firm_recalls_webcams_over_mirai_botnet_infection_ddos_woes/

Ya, idk. I can still get mail but I just got one this morning from Friday so it's not just the interfaces.

@thanksaj said:

@scottalanmiller said:

@thanksaj no, AJ. Not ironic. Not at all.

Ironic means something is the opposite of the way you'd expect. I'd say this is slightly ironic.

It means a little more than that, that's the new "hipster" definition that people starting using because actual irony was too hard and they wanted to be able to call coincidental things ironic to sound cool. But it is completely incorrect both as a linguistic usage and, in the way that you are attempting to use it, it is not at all ironic, it is at best coincidental - it is used in a very expected way, not in any way surprising or unexpected or opposite, in a way that coincidentally has something to do with you.

It's actually so expected and so unrelated to you, that even calling it coincidence is a stretch and for something to be irony requires coincidence and then a cause/effect inverted intention relationship. This lacks all three requirements for irony. The coincidence piece is just a word appearing in one place that also appears in another. That's stretching coincidence to the limit. That's like saying that you went to the grocery store today and... so did some other people! What a coincidence!