Results 1 to 3 of 3
  1. #1
    Join Date
    May 2009
    Markham, Canada

    * Test for open DNS resolvers (DNS Amplification Attack)

    This script scans all OpenVZ containers on a node for open DNS resolvers:

    echo "Simple script to scan all OpenVZ containers for open DNS resolvers"
    echo "For web-based testing use"
    for ip in `vzlist -H | awk '{print $4}'`;
        OUT=$(dig +short +tries=1 +time=2 TXT @$ip | grep open-resolver-detected)
        if [ -z "$OUT" ]; then
            echo "$ip is not an open resolver"
            echo "$ip IS an open resolver!"
    Quick wget command (run as root):
    chmod 0700

    Sample output:
    Simple script to scan all OpenVZ containers for open DNS resolvers
    For web-based testing use is not an open resolver IS an open resolver! is not an open resolver is not an open resolver

    Manually test an IP address:
    dig +short TXT @
    #Replace with the IP address or domain name of the DNS server you are testing.
    Check out our premium self-managed SSD VPS

  2. #2
    Thanks for this script.. Its using for me

  3. #3
    Join Date
    Dec 2011
    Very useful for hosting providers. They should all have this running as a cron with mail alerts, so it scans the containers once a week or so or maybe automatically e-mails the clients if they run an open resolver. This is very important in my opinion and most hosters don't care about it. So thanks for sharing!
    JavaPipe LLC: Global Tomcat Hosting & DDoS Mitigation Solutions
    In business since 2001 | Contact us: salesrequest[at]
    █ Remote Protection | Dedicated Servers | Virtual Servers | Unmetered VPS | Tomcat Hosting

Similar Threads

  1. Open dns ip address for use as local resolvers?
    By nrider321 in forum Dedicated Server
    Replies: 4
    Last Post: 12-10-2013, 06:23 AM
  2. Closing Open DNS Resolvers ??
    By ransome in forum Hosting Security and Technology
    Replies: 1
    Last Post: 07-17-2013, 05:36 PM
  3. Replies: 2
    Last Post: 02-05-2013, 03:47 PM
  4. DNS Amplification attack
    By iEcho in forum Dedicated Server
    Replies: 12
    Last Post: 08-02-2012, 05:22 PM
  5. DNS resolvers help
    By WebHostBeast in forum VPS Hosting
    Replies: 2
    Last Post: 02-11-2009, 02:55 PM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts