Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

enable abuse management for zone dns operators #477

Open
ThomasWaldmann opened this issue Apr 8, 2021 · 0 comments
Open

enable abuse management for zone dns operators #477

ThomasWaldmann opened this issue Apr 8, 2021 · 0 comments

Comments

@ThomasWaldmann
Copy link
Member

#476 showed that nsupdate.info service is lacking some functionality for zone operators who are not running their own nsupdate.info software instance (but just run DNS service for some zone offered via nsupdate.info website) and thus do not have admin access to configuration files and django admin:

  • some users abuse the service by using dyndns for their criminal activities
  • domain owners get complaints (usually forwarded from their domain registrar, sometimes also directly), from police, fbi, interpol, etc.
  • of course registrars are not willing to handle too many of such complaints

When offering hosts / domains, one can not do much to prevent such abuse, but we need to be able to react quickly if we get informed about such abuse.

My usual procedure when an abusive (in the sense of "being used for criminal activities") host is found:

  • check what user account created the host (manually via django admin)
  • kill the user account in the database (which will also kills all hosts of that user, which might be also used for criminal activities anyway) (manually via django admin)
  • blacklist the host names so they can't be recreated (manually via config file)

TODOl:

  • move the host blacklist from config to the DB (check what we already have)
  • have some view for domain owners where they can fill in a "bad host list"
  • do same procedure as above, just automated
  • report back about all host names that were deleted / blacklisted
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant