cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Nux (JIRA)" <>
Subject [jira] [Created] (CLOUDSTACK-9464) VR vulnerable to DNs reflection attacks
Date Mon, 22 Aug 2016 14:54:20 GMT
Nux created CLOUDSTACK-9464:

             Summary: VR vulnerable to DNs reflection attacks
                 Key: CLOUDSTACK-9464
             Project: CloudStack
          Issue Type: Bug
      Security Level: Public (Anyone can view this level - this is the default.)
          Components: Virtual Router
    Affects Versions: 4.9.0, 4.8.0
         Environment: Advanced zones with Security Groups 
            Reporter: Nux

In advanced zones with Security Groups and probably Basic Zones, too, the VR opens the DNS
service to everyone (-j ACCEPT).

As a result Cloudstack VRs are currently used in DNS reflection or amplification attacks.

There is some discussion about this in

This PR tries to rectify the problem:

This message was sent by Atlassian JIRA

View raw message