BODIS

[matt_bodis]

Bodis.com

---

Former topic:

• The New REVOLUTION in Domain Parking is HERE! - Bodis.com

 

[ngenme]

Why would anyone DDOS bodis? What to do when DDOSed? Should we track the culprit IP?

 

[matt_bodis]

It is not one single IP address, it's many IP addresses. Usually it comes from Asia however sometimes from the US (much rarer however).

When DDOSed you can have fail over networks, blackhole server, many things that can be done but since we weren't prepared early on it now takes time to set it up.

Other than that, there is not much else that's why Microsoft and all these big companies always get hit and you hear it in the news that they have downtime.

Except their infrastructure is much bigger thus the DDOSes that hit us probably can hit Microsoft and no one will notice a difference. That's not to say whatever hits us ain't big. They are all over a gigabit.

 

[ngenme]

Ah well, my parked page is back up again Sorry to hear that Matt.

But why would anyone DDOS parking page is beyond me. Extortion?

 

[JoeBiz]

"These are from the top 20 or 30."

 

[tonyk2000]

We at least have the parked pages up, which is the most important.

It is correct for DNS-parked domains only. Unfortunately, CNAME-parked domains (or, to be more specific, domains pointed to 199.59.241.250 IP as prescribed in the acct management area) are not working. And the reason is that 199.59.241.250 is no more routable address. Matt, should we update it to any other IP?
Or, even better, if update anything, why not to update it to CNAME record so that any IP changes, if necessary in future, would be done by Bodis on your end?

---------- Post added at 10:49 PM ---------- Previous post was at 10:36 PM ----------

As to the question WHY... What a strange coincidence: I park domains with Bodis, and about the same time received invitations to join from two different parking companies, one "new player" and another well-known "old" player, in these exact days. One may guess that Bodis competitors, if not ordered DDOS themseleves, may be using this situation to prompt Bodis customers to switch.

 

[matt_bodis]

It is correct for DNS-parked domains only. Unfortunately, CNAME-parked domains (or, to be more specific, domains pointed to 199.59.241.250 IP as prescribed in the acct management area) are not working. And the reason is that 199.59.241.250 is no more routable address. Matt, should we update it to any other IP?
Or, even better, if update anything, why not to update it to CNAME record so that any IP changes, if necessary in future, would be done by Bodis on your end?

That's exactly what we are doing, I was going to make a formal announcement before bed time so do expect an email and an update in a little while.

Yes you should change IP forwarding .250, to:

www CNAME parking.bodis.com
(blank) CNAME parking.bodis.com
* CNAME parking.bodis.com

Unfortunately most attacks came in through .250 and there was no way to just "change" IP address when we were under an attack for domains pointed directly to that IP. Our ISP provider and us decided to null route the address altogether because the attacks were excessive on that IP address to the point it was affecting everyone on name servers / other implementations more than it would be worth.

Or simple change to name servers, which I believe would be the best solution. Especially now where we are able to route certain regions to different networks/IP addresses as needed starting today.

---------- Post added at 10:54 PM ---------- Previous post was at 10:50 PM ----------

As to the question WHY... What a strange coincidence: I park domains with Bodis, and about the same time received invitations to join from two different parking companies, one "new player" and another well-known "old" player, in these exact days. One may guess that Bodis competitors, if not ordered DDOS themseleves, may be using this situation to prompt Bodis customers to switch.

They are just feeding on the vulnerable. Once we bring out our next update to our platform they will be the vulnerable.

Luckily all they are doing is helping me move and create a stronger and better network. So if it is true, it just ends up being a plus for us.

There aren't many businesses that make it far based on fraud/deception..except Al Gore. We can be weak now, but it will only help us become so much better in the future. Thanks for the support! :tu:

 

[ngenme]

Oh No Matt. With IP forwarding nulled, we'll above.com will no longer work on bodis!
Not to mention that ns1.bodis.com is blocked in china. Whoever is screwing you has clouts in china.

I also got called by my domain manager at the same time bodis is in trouble a few months ago. Pm me and we'll match record. This is unfair competition!

---------- Post added at 09:42 AM ---------- Previous post was at 08:57 AM ----------

I have no choice. Temporarily I have to move domains from bodis to another. Wow Matt, my whole biz with you count on this IP stuffs. It'll be a while for me to repoint all the IP stuffs to bodis again. I will experiment with that cname thingy but people will just ddos the cname. Not to mention actual reduction in traffic.

First ns1.bodis.com is blocked in china.
Then above.com stop redirecting to bodis and turning off automation doesn't seem to do any help.
Now this

Somebody is quite determined to get it all.

How in the earth the ddos attacker can control so many IP.

 

[matt_bodis]

Teguh, please let's keep it to the facts and not scare everyone away.

Above is NOT blocking Bodis. They use CNAME now.

NS1.BODIS.COM is NOT blocked in China.

 

[ngenme]

Sorry Matt. Glad to know that cname still work. Glad to also know that ns1.bodis.com is no longer blocked in China :D

I think I know what to do.

Some of my friend business still work at bodis then. I will just update my hosting (100 shared and 1000 domains) to use cname rather than IP redirect. I can't do this as fast as above.com unfortunately.

Will this IP issue be permanent or temporary? If its temporary I'll just wait till it works again and set things up correctly again. If it's permanent I have to start working on things and it'll take a very long time.

 

[matt_bodis]

LOL no worries. Just didn't want to confuse everyone more than they already are. It was a valid concern.

It's really unexpected news, but we had to do what we had to do to save our network.

Having said that, today so far looks like a pretty good day.

 

[wolfis.com]

this is still no way to do honest business - just making changes with no warning at all !!

yesterday bodis only shows half of my usual traffic and a fraction of the revenue and today next to nothing nothing .

you can not change things and THEN after the fact send out an email hours later what kind of business are you having here !!

you have to inform people and THEN give them a chance to make the changes and NOT like this - i lost already a lot of money !!

this is NOT how one does business !!

i use above.com - just like many other people and even bodis is the smallest part of it , it still is NOT right to MAKE CHANGES AND THEN INFORM !!

 

[tonyk2000]

Or simple change to name servers, which I believe would be the best solution.

Uff... just finished editing DNS one-by-one replacing A-record with CNAME. The problem is that I use my own traffic distribution system, similar but not equal to what above.com offers, so DNS change is not for me

Hope that parking.bodis.com would also have approporiate geo-based DNS resolution.

As a side note, Matt, you might want to change something in outgoing e-mailing system as an important e-mail you just sent arrived directly to my spam folder because of:

X-Spam-Report:
* 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
* valid
* 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
* 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
* 3.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool

Date: Fri, 14 Dec 2012 02:07:51 -0600 (GMT-06:00)
From: "Bodis.com Auto-Notification" <[email protected]>

 

[JoeBiz]

Post Removed

 

[ngenme]

Wolfis it's unexpected at bodis too. I have had great times at bodis. I will again once I sort this out. Unfortunately it'll take a lot of programming to change my domain from A to cname. I don't even know what it means yet and will have to learn it. I am near deadline for my start up of isikota.com

Can anyone confirm that above.com still work at bodis?

I hope the change is temporary Matt. That way I don't have to change anything and things can work again. If not, I'll change things. Matt has been nice.

 

[wolfis.com]

as far as i read it in the past posts - you will no longer be able to use bodis at above.com and there is no way i change this - i use above.com no matter what . i let software decide who pays me the most .

 

[Name Trader]

I'm still getting revenue on my Bodis parked domains via Above.com

 

[matt_bodis]

this is still no way to do honest business - just making changes with no warning at all !!

yesterday bodis only shows half of my usual traffic and a fraction of the revenue and today next to nothing nothing .

you can not change things and THEN after the fact send out an email hours later what kind of business are you having here !!

you have to inform people and THEN give them a chance to make the changes and NOT like this - i lost already a lot of money !!

this is NOT how one does business !!

i use above.com - just like many other people and even bodis is the smallest part of it , it still is NOT right to MAKE CHANGES AND THEN INFORM !!

Well first off, let me state Above.com is currently unaffected by this change as Above uses CNAME forwarding. We've worked with Above on making this change. We are a preferred Above partner and I look out for any issues that pertain to Above accounts using Bodis.

Secondly, It is not what we wanted to do. We don't want to make customers unhappy not to mention lose customer revenue as well. If it were something else that wasn't urgent we'd definitely send out a notification and wait for the user to make changes first.

If we'd keep the IP address running, I can assure you all of Bodis would be unaccessible today and for as long as we'd basically block off traffic to the IP forwarding method. So the end result could've been much much worse. Luckily things seem to be quite OK now. :tu:

We apologize again for the inconvenience, and if there is any revenue loss we will be reviewing over the weekend and applying credits where they are due.

The users that still haven't changed to CNAME, we will credit for any revenue lost until that change has been made.

Uff... just finished editing DNS one-by-one replacing A-record with CNAME. The problem is that I use my own traffic distribution system, similar but not equal to what above.com offers, so DNS change is not for me

Hope that parking.bodis.com would also have approporiate geo-based DNS resolution.

As a side note, Matt, you might want to change something in outgoing e-mailing system as an important e-mail you just sent arrived directly to my spam folder because of:

X-Spam-Report:
* 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
* valid
* 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
* 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
* 3.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool

Date: Fri, 14 Dec 2012 02:07:51 -0600 (GMT-06:00)
From: "Bodis.com Auto-Notification" <[email protected]>

Thanks for taking the time to get that done! :tu:

I will look into the spam issue. Sure enough they caught us using Microsoft Outlook headers. :p Some email networks consider it as a plus, and apparently not in your case. So perhaps things have changed from when we first implemented it. I'll look into it!

as far as i read it in the past posts - you will no longer be able to use bodis at above.com and there is no way i change this - i use above.com no matter what . i let software decide who pays me the most .

I repeat, Above.com is NOT affected by this as Above uses CNAME for forwarding to Bodis. We are an Above paid/preferred partner and would not do anything to lose the partnership.

The last time I Parked at Bodis (a few years ago) I think you could still adjust your own keywords and select templates.

My names have only been parked for four or five days so I haven't expected much to happen. But what should I be expecting? Am I in a temporary google sandbox? Are my names OK?

Keywords are no longer adjustable, however we do let you select template!

Hopefully a member can help you out with the domain advice.

 

[ngenme]

Hmmm.... I set that ww1.businessbuygoldingots.com points to parking.bodis.com

Doesn't work yet. Am I doing this right? Maybe I'll just wait for a while. This look easy Most biz can start again soon.

 

[matt_bodis]

Teguh, it works here! Your domain name is resolving properly.

The way DNS works however, is that your ISP provider may be slow to update their zone records. Give your ISP time or perhaps just reset your router/cable modem and restart your computer to see if that solves your problem.

Could be either your computer DNS has the old records cached or your ISP is slow to update. Probably just your computer cache.

 

[wolfis.com]

if the above account was not affected , how comes that my accounmt shows for yesterday LESS than HALF of the usual traffic AND REVENUE - please do explain as i DID not MAKE any changes until this morning several hours AFTER your email came ??

i laso noticed - YOU EVEN CAN CLEARLY SEE THIS

there was NOT TRAFFIC OR REVENUE COUNTED from 1pm until 11 pm yesterday - you like to tell me that NO ONE VISITED ANY PAGES ???

let me get one thing very clear here - i used above until TODAY - you said it was NOT AFFECTED - EXPLAIN !