1<!DOCTYPE html> 2<html lang="en-gb" dir="ltr" class='com_content view-article itemid-101 home j39 mm-hover'> 3 4<head> 5 <title>Vox Telecom LG</title> 6 <meta http-equiv="content-type" content="text/html; charset=utf-8" /> 7 <meta content="IE=edge" http-equiv="X-UA-Compatible"> 8 <meta content="width=device-width, initial-scale=1, user-scalable=yes" name="viewport"> 9 <meta http-equiv=âStrict-Transport-Securityâ content=âmax-age=31536000"> 10 <meta http-equiv="X-Content-Type-Options" content="nosniff"> 11 <link rel="shortcut icon" type="image/icon" href="/static/logo.ico"> 12 <link rel="stylesheet" type="text/css" href="/static/css/bootstrap.min.css"> 13 <link rel="stylesheet" type="text/css" href="/static/css/styles.css">
vendor: 65 bytes, lines 13-14
13 14 <script src="https://www.google.com/recaptcha/api.js?render=
146LfbZTMhAAAAAFo2zmLUUBqETsZdEvY2zfcFBL0a
vendor: 16 bytes, lines 14-15
14"></script> 15
15<script src="/static/js/jquery-3.6.1.min.js"></script>
15 16
16<script src="/static/js/bootstrap.min.js" async></script>
16 17
17<script src="/static/js/script.js" async defer></script>
17 18 <title> 19 Vox Telecom LG 20 </title> 21</head> 22 23 24<nav class="navbar navbar-expand-lg navbar-light bg-light fixed-top shadow"> 25 <div class="container"> 26 <a href="/"><img class="logo-img" src="/static/logo.png" alt="Logo" /></a> 27 <button class="navbar-toggler" type="button" data-bs-toggle="collapse" 28 data-bs-target="#navbarSupportedContent" aria-controls="navbarSupportedContent" aria-expanded="false" 29 aria-label="Toggle navigation"> 30 <span class="navbar-toggler-icon"></span> 31 </button> 32 <div class="collapse navbar-collapse" id="navbarSupportedContent"> 33 <ul class="navbar-nav navbar-center"> 34 <li class="nav-item"> 35 <a class="nav-link" href="/openresolvercheck" (click)="ToggleNavBar()">Open Resolver Check</a> 36 </li> 37 <li class="nav-item"> 38 <a class="nav-link" href="https://as11845.tech:8004" (click)="ToggleNavBar()">Looking Glass</a> 39 </li> 40 <li class="nav-item"> 41 <a class="nav-link" href="/communities" (click)="ToggleNavBar()">Communities</a> 42 </li> 43 <li class="nav-item"> 44 <a class="nav-link" href="/info" (click)="ToggleNavBar()">Service Information</a> 45 </li> 46 <li class="nav-item"> 47 <a class="nav-link" href="/security" (click)="ToggleNavBar()">Security Information</a> 48 </li> 49 <li class="nav-item"> 50 <a class="nav-link" href="https://www.vox.co.za/peering-policy" target="_blank" rel="noopener" 51 rel="noreferrer">Vox Peering Policy</a> 52 </li> 53 <li class="nav-item"> 54 <a class="nav-link" href="https://www.peeringdb.com/net/3586" target="_blank" rel="noopener" 55 rel="noreferrer">PeeringDB</a> 56 </li> 57 <li class="nav-item"> 58 <a class="nav-link" href="/grafana" (click)="ToggleNavBar()">NPM Stats</a> 59 </li> 60 </ul> 61 </div> 62 </div> 63</nav> 64 65<body> 66 67 68<div class="container pb-5 pt-5"> 69 <div class="row"></div> 70</div> 71 72<div class="container pt-5 pb-1"> 73 <h1>Understanding and Securing Open DNS and NTP Resolvers</h1> 74 <h5>Welcome to our guide on open DNS and NTP resolvers</h5> 75 <p>If your router or network device has been flagged as having an open resolver, it could be at risk of being exploited by cybercriminals for attacks like DDoS (Distributed Denial of Service).<br> 76 Don't worryâwe're here to help you understand the issue and secure your setup step by step. As a Vox customer, you can use our free scanning tools to check your network before and after making changes. This ensures everything is fixed properly.<br> 77 </p> 78</div> 79 80<div class="container pt-5 pb-1"> 81 <header> 82 <h2>Quick Glossary of Key Terms</h2> 83 <p>We've kept things simple, but here are some acronyms you might see:</p> 84 </header> 85</div> 86 87<div class="container pb-3 pt-2"> 88 <ul> 89 <li><strong>ACL (Access Control List):</strong> A set of rules on your router or firewall that decides what network traffic is allowed or blocked, based on things like IP addresses or ports. It's like a bouncer at a club door.</li> 90 <li><strong>VIP (Virtual IP Address):</strong> An IP address that's not tied to one specific device. It's often used in setups like port forwarding to direct traffic from the internet to a device inside your network.</li> 91 <li><strong>NAT (Network Address Translation):</strong> A way for multiple devices on your home or office network to share one public internet IP address. It keeps your internal devices hidden and secure.</li> 92 </ul> 93</div> 94 95<div class="container pt-5 pb-1"> 96 <h2>What is an Open DNS Resolver and How to Secure It</h2> 97 <p>An open DNS resolver is like an unsecured phone book for the internetâanyone can query it to look up website addresses, which can be abused to overwhelm websites in attacks.<br>If our scan identified your router as one, here's how to fix it safely:</p> 98</div> 99 100<div class="container pb-3 pt-2"> 101 <ul> 102 <li><strong>Disable DNS Recursion:</strong> Stop your router from answering DNS questions from outside your network. Limit it to only handle requests from your own devices (internal networks).</li> 103 <li><strong>Set Access Controls (ACLs):</strong> Restrict who can use your DNS service. Only allow trusted IP addresses, like those from your home or office network.</li> 104 <li><strong>Update Firewall Rules:</strong> Block incoming DNS traffic on port 53 from the internet, unless you've specifically approved it.</li> 105 <li><strong>Disable Unused DNS Services:</strong> If you don't need the DNS feature on your router, turn it off completely. Or, set it to only work internally.</li> 106 <li><strong>Keep Router Firmware Updated:</strong> Check for and install the latest updates from your router manufacturer. These often include security fixes.</li> 107 <li><strong>Disable NAT/VIP Statements:</strong> Remove any rules that forward port 53 traffic from the internet to an internal device.</li> 108 </ul> 109 <p>
109If you're unsure about any step, contact our <a href="https://www.vox.co.za/" target="_blank" rel="noopener noreferrer"><span class="green-text">Vox support</span></a> deskâthey'll guide you through it.</p> 110</div> 111 112<div class="container pt-5 pb-1"> 113 <h2>What is an Open NTP Resolver and How to Secure It</h2> 114 <p>NTP stands for Network Time Protocol, which keeps clocks in sync across devices. An open NTP resolver means anyone on the internet can query your device for time info,<br>which attackers can amplify into massive DDoS attacks. 115 If our scan flagged this, follow these steps: 116 </p> 117</div> 118 119<div class="container pb-3 pt-2"> 120 <ul> 121 <li><strong>Restrict NTP Access:</strong> Limit queries to your internal or trusted networks only. Block all external requests that aren't from your organization.</li> 122 <li><strong>Disable NTP Monlist / Control Queries:</strong> Turn off advanced features like "monlist" or "ntpdc" queries, as these are common targets for abuse.</li> 123 <li><strong>Set Access Controls (ACLs):</strong> Use rules on your router or firewall to control access to UDP port 123 (the NTP port) from outside networks.</li> 124 <li><strong>Update Firewall Rules:</strong> Block incoming and outgoing NTP traffic on UDP port 123 to untrusted sources. Only sync with reliable, approved NTP servers (like those from pool.ntp.org).</li> 125 <li><strong>Disable Unused NTP Services:</strong> If your router doesn't need NTP (e.g., if another device handles time sync), shut it down entirely.</li> 126 <li><strong>Keep Router Firmware Updated:</strong> Regularly apply firmware updates to patch vulnerabilities, including NTP-related ones.</li> 127 <li><strong>Disable NAT/VIP Statements:</strong> Look for and remove any forwarding rules exposing UDP port 123 to the internet. Restrict them to internal use.</li> 128 </ul> 129 <p>As always, our <a href="https://www.vox.co.za/" target="_blank" rel="noopener noreferrer"><span class="green-text">Vox support</span></a> team is ready to assist if needed.</p> 130</div> 131 132<div class="container pt-5 pb-1"> 133 <h2>How to Check and Validate Your Fixes with Our Tools</h2> 134 <p>We make it easy to verify your network's security:</p> 135</div> 136 137<div class="container pb-3 pt-2"> 138 <ul> 139 <li><strong>Before Fixing:</strong> Use our free online scanner at <a href="https://as11845.tech/openresolvercheck" target="_blank" rel="noopener noreferrer"><span class="green-text">https://as11845.tech/openresolvercheck</span></a> 140 Enter your public IP or run the tool directly to detect open resolvers.</li> 141 <li><strong>After Fixing:</strong> Run the same scan again to confirm the issues are resolved. You'll get a clear report showing "All Clear" for DNS and NTP.</li> 142 <li><strong>Why it matters:</strong> This before-and-after validation ensures no vulnerabilities remain and gives you peace of mind.</li> 143 </ul> 144 <p>If the scan still shows issues or you're a Vox customer needing hands-on help, reach out to our <a href="https://www.vox.co.za/" target="_blank" rel="noopener noreferrer"><span class="green-text">support desk</span></a> at <strong>[email protected]</strong> 145 or call <strong>087 805 0000</strong>.<br> 146 We're committed to keeping your network safe! 147 </p> 148</div> 149 150 151<div class="container pb-3 pt-5"> 152 <div class="row"></div> 153</div> 154 155 156</body> 157<footer class="footer mt-auto pt-5 fixed-bottom"> 158 <div class="p-2 text-center pt-3 foot"> 159 <p class="text-white text-center"> 160 © Copyright <span id="currentYear"></span>. Vox Telecom. All rights reserved.</p> 161 </div> 162</footer> 163</html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.