SAD DNS - DNS Poisoning Attack

[skyweir]

Hi there,

Asking if the Sonic team has taken measures to prevent this attack as the test link provided (https://www.cs.ucr.edu/~zhiyunq/SADDNS.html) indicates the DNS servers may be vulnerable.

Your DNS server IP is 138.23.201.101
Since it blocks outgoing ICMP packets, your DNS server is not vulnerable.
The test is conducted on 2020-11-14 18:34:58.529882536
Disclaimer: This test is not 100% accurate and is for test purposes only.

Thanks, Steve

[kgc]

Steve, thanks for bringing this to our attention, I hadn't run across this yet. We've gone ahead and put mitigation in place on our servers. Note that the IP address you provided isn't one of our DNS servers.