Quick question.. Would it cause any problems to configure DNSCrypt with this setup? Would the VPN route DNS requests correctly or would I need to modify the VPN config?

http://support.godaddy.com/help/article/680/managing-dns-for-your-domain-names

Just logic, my own experience with designing websites, and knowledge of the browser. All modern browsers do it (and not to get personal data), but to speed up the Internet. Firefox sends requests to p

(Quote)

@qrwteyrutiyoup if I use -I, it's not really different than I manually put allow udp dns rules before block all udp rules.

(Quote)

before allow dns udp port which does not work unless I put allow dns udp before drop all udp.

What about hosting your DNS on cloudflare for free. more radical but would offload your server ;-)

I was trying to block all udp first, then allow dns but it does not work. It works when I put allow dns rules first, then block all udp rules after. Is there anyway to block all udp first?

Not taking OPs side or anything here, but I think more people should just have templates that don't have a dns/ntp server included. If people want it they can install it themselves, it isn't hard. As

(Quote)

I already have enough troubles with the cops, court etc. Anyway, this was my first server which was subject to a ddos attack, ntp/dns vulnerable thingy

how can I confirm if my server is exploitable with ntp/dns? i'm using Debian, is this OS exploitable like that by default? if yes then I really have to know!

DNS and NTP reflection happened because you didn't secure the server. That should be the second thing you do after changing the password.

I decided to use cloudflare ipv4 to ipv6 to keep it online. Some parts of the world had problems with cached dns entries.

I refused to talk to him on Skype as he randomly added me without me giving him my skype to tell me that he had basically send a DNS DDoS attack to my site. I dislike him as a person on here so I see

We used DNS Made Easy, have it checking a php db connection page, if the web server goes down or the db connection is lost it moves over the the backup vps and emails us. We can then manually change i

In addition to DNS failover, consider using a dedicated LB in front. They tend to die in less horrible ways and you'll have less of a chance of an external DNS ping monitor saying the server is up wh

You could probably do your own DNS failover system quite easily too... but if you just use those two boxes it won't be reliable enough..

You can set up the website on 2 servers and use some service like http://www.dnsmadeeasy.com/services/dns-failover-system-monitoring/ so that it will check the primary ip and if fails automatically sw