QuickDNS Pro hacking/crackng?

From:

Date:

Time:

Has anyone toyed around with hacking QuickDNS servers? I had a client who
co-located a server on my network (Windoze NT-four-oh) who was completely
paranoid about hackers (As I was saying, he WAS running NT :-). One day,
with me in the office, he attempted to hack every one of my Mac servers.
Aside from SYN floods, nothing ever had any effect, except what he did to
my Quick DNS Pro Server.
I was running QDNS 1.2, (still am) and he used a program called PortF*ck
to open, and hold open as many TCP streams as possible. This is different
than a SYN, that just opens, and lets streams hang and timeout on their
own, because it actually doesn't let the streams timeout, it keeps sending
keepalive data to keep the streams going. Of course, this is just what
I'm told from NT-hacker-boy; it could be wrong.

After about 50 open streams on port 53, my machine started to chug, until
it ground to a halt. Froze solid. Since it was my seccondary server at
the time, I even let it sit overnight, thinking that it might recover, but
it didn't.
After I bumped QDNS Pro's mem partition from 8 MB down to 4MB, this
problem went away. Now, the machine will grind to a halt, but after
several minutes, (or seconds, it seems to differ from attack to attack) it
will recover, and be fine.
Has anyone else witnessed this strange phenomenon with QDNS Pro? Does 2.0
(or 2.1) have this same problem?
I'm running 20 primary and secondary domains, and my server does about
100,000 lookups a day. I'd really like to give it more memory if I can
get away with it, without loosing stability in a "hacker" situation.

My other server processes, HTTP, SMTP, POP, FTP, etc, located arround my
network on different, and varoius machines didn't fall to any sort of
attack. Just my QuckDNS server (until I gave it LESS memory).

-Jerry

----------------------------------------------------
Since 1995, when I purchased my PowerBook 520, I've heard promise after
promise out of Apple. Copeland, Gershwin, the BeOS buyout rumor, NeXT,
Rhapsody, MacOS X...... It seems like the 'next big thing' is always
about a year away. Microsoft may be slow at product releases, but at least
they release it.
(And yes, I love Apple, I'm just a little frustrated with them!)

Sales:
888/4-DPOINT

Support:
858/452-3696