Fantastic cloud DNS hosting service.

w1z4rd

w1z4rd

Karmic Sangoma
Joined
Jan 17, 2005
Messages
52,146
Reaction score
8,340
Location
127.0.0.1
http://www.cloudflare.com

This free (basic service is free) DNS service is probally the best free dns system I have come across. Its really great for security.

I built a tight domain using cloudflare and gmail. I put the MX and mail records into gmails cloud and protect the IP of the hosting server from most forms of attack. This includes ddos.

I host a pretty busy website that was under constant exploit attack and protecting it with cloudflare has really paid off.

Highly recommend this service :D

To give you an example domain check boo.co.za . Nmap results are interesting :D
 
interesting. looks like :80 and :25 are disallowed to nmap.
i got a whole bunch of garbled junk back about too many requests or something.
does it then get logged somewhere?

i really like the autoconfigure by populating from existing dns records. win.
it didn't pull my wildcards across though iirc.

nice concept - might be helpful for smaller clients with simple dns setups.
i must say though, namecheap's free dns does auto-population of google apps mx records, which is a big plus for me.
i'm getting tired of bundled dns and hosting...
 
ghoti said:
http://www.cloudflare.com

This free (basic service is free) DNS service is probally the best free dns system I have come across. Its really great for security.

I built a tight domain using cloudflare and gmail. I put the MX and mail records into gmails cloud and protect the IP of the hosting server from most forms of attack. This includes ddos.

I host a pretty busy website that was under constant exploit attack and protecting it with cloudflare has really paid off.

Highly recommend this service :D

To give you an example domain check boo.co.za . Nmap results are interesting :D
Click to expand...

Thanks very much for recommending CloudFlare! They really are looking very good, even for the paid version.

I'm giving them some serious consideration now.
 
Thanks Ghoti and MurrayBiscuit - both seem like good options - I will try one of them with my next client I set up.
 
It says my free domain that I run Google Apps on is not a registered domain. I sent them a support ticket, let's see how it goes :p
 
teraside said:
It says my free domain that I run Google Apps on is not a registered domain. I sent them a support ticket, let's see how it goes :p
Click to expand...

They dont do .za.org and .za.net cause theyre not TLDs. I have asked them to be able to use these domains, but they didnt sound too interested.
 
ghoti said:
They dont do .za.org and .za.net cause theyre not TLDs. I have asked them to be able to use these domains, but they didnt sound too interested.
Click to expand...

Mine is co.cc, I guess it's not a top level domain as well?
 
teraside said:
Mine is co.cc, I guess it's not a top level domain as well?
Click to expand...

I think cc is the tld, not sure, but I think your domain is suffering from the same problem our .za.nets and .za.orgs are suffering from. Really hope they come up with a solution sometime soon.
 
ghoti said:
I think cc is the tld, not sure, but I think your domain is suffering from the same problem our .za.nets and .za.orgs are suffering from. Really hope they come up with a solution sometime soon.
Click to expand...

Thanks,
I will let you know what they say in their reply :)
 
ghoti said:
http://www.cloudflare.com and protect the IP of the hosting server from most forms of attack. This includes ddos.
Click to expand...

For a very small DDOS, perhaps, but if it grows to anything larger than an annoyance, cloudflare will route the incoming attack straight back to your real IP:

http://www.webhostingtalk.com/showpost.php?p=7575814&postcount=2

DDoS: I will again state that we're not a DDoS solution. While the nature of our network can help with some attacks, larger attacks do cause us to go direct to your server. But you can do some cool things in your threat control panel to help stop IPs from hitting your server...
Click to expand...
 
texo said:
For a very small DDOS, perhaps, but if it grows to anything larger than an annoyance, cloudflare will route the incoming attack straight back to your real IP:

http://www.webhostingtalk.com/showpost.php?p=7575814&postcount=2
Click to expand...

I wanna see the ddos bots fill in the captcha :D

However, with their IP filtering system its easy to block the traffic. I put "South Africa" into the trust list, and then if you ban Russia and China... well.. theres not much left to ddos you with :D
 
:)

You misunderstand: it's the millions of incoming connections from a DDOS that cause the problem. Whether they're redirected to a captcha or "banned" they're still going to block the incoming pipe and clouflare will route back to your own IP.
 
texo said:
:)

You misunderstand: it's the millions of incoming connections from a DDOS that cause the problem. Whether they're redirected to a captcha or "banned" they're still going to block the incoming pipe and clouflare will route back to your own IP.
Click to expand...

I dont misunderstand. I know that, but you can ban entire countries and white list countries, so unless they have 10000000000000000000 zombies in SA, you dont have to worry unless you are catering for a more international audience. As they say in that post, you can do some cool IP filtering so your pipe does not get too full. The captcha is presented by cloudflare for those that are not banned.

So while under attack, If you filter out non-sa peeps for the duration of the attack you really shouldnt have a problem. If the pipe is only being used for SA people theres not ganna be a problem. You can ease restrictions once the attacks stop.
 
Hmm that country level filtering and dydns sound great. Not sure if I'd blanket out everything but za. Would be nice if it worked by inclusion or exclusion.
 
ghoti said:
http://www.cloudflare.com

This free (basic service is free) DNS service is probally the best free dns system I have come across. Its really great for security.

I built a tight domain using cloudflare and gmail. I put the MX and mail records into gmails cloud and protect the IP of the hosting server from most forms of attack. This includes ddos.

I host a pretty busy website that was under constant exploit attack and protecting it with cloudflare has really paid off.

Highly recommend this service :D

To give you an example domain check boo.co.za . Nmap results are interesting :D
Click to expand...
Does it block malware?
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X