May 11, 2015
SoftBank Mobile Corp.

Measures for DNS amplification attack

Dear Customer,

Thank you very much for using SpinNet.

SpinNet will restrict using some connection in order to enhance security.
Please refer the following for more details:


1. Measures: SpinNet will block TCP/UDP 53 port, which is used to resolve DNS, in order to prevent DNS Amplification attack (*1) via open resolvers (*2).

*1 DNS Amplification attack is which attackers send myriad requests to open DNS server in order to flood a target system with DNS response traffic.
*2 An open resolver is a DNS server which will resolve recursive DNS lookups for anyone on the Internet.
2. Starting Date: From October 2015.
3.Effects: There is no effects on browsing websites and using emails.

Customers who installed a self-made DNS server and open it to the Internet will not be able to resolve DNS lookups via the Internet.
4.Information: + Attention to Open Resolver (JPNIC) (Written in Japanese only)
+ DDoS attacks using recursive DNS requests (JPCERT/CC)
+ Multiple broadband routers may behave as open resolvers

If you have any questions or comments, please contact our Customer Support Center.