[as112-ops] uceb.org "A" queries on AS112

[Peter Koch]

On Sat, Aug 09, 2008 at 05:49:53PM +0100, Nick Hilliard wrote:

> Could you ask these people to disentangle uceb.org from AS112 then?

the guy had bad luck with his blacklist. After feeling under DDoS with
queries for "2.0.0.127.blackholes.uceb.org"  he had looked for some
dedicated name servers responding with NXDOMAIN not to confuse his still
remaining real users and found blackhole-{1,2}. (Well, at least our NSD
will happily answer SERVFAIL for non served domains.)

Meanwhile the host records for ns[12].uceb.org in the ORG zone have been
changed:

	Host ID:H54716329-LROR
	Host Name:NS1.UCEB.ORG
	Sponsoring Registrar:Network Solutions LLC (R63-LROR)
	Created On:24-Apr-2006 12:46:46 UTC
	Last Updated On:10-Aug-2008 11:28:45 UTC
	IP Address:192.0.2.1

	Host ID:H54716330-LROR
	Host Name:NS2.UCEB.ORG
	Sponsoring Registrar:Network Solutions LLC (R63-LROR)
	Created On:24-Apr-2006 12:46:47 UTC
	Last Updated On:10-Aug-2008 11:29:05 UTC
	IP Address:192.0.2.2

This is almost in line with the shutdown recommendations in
<draft-irtf-asrg-bcp-blacklists-04.txt>.  Hopefully the stale delegation
won't cause any issues at the ORG level.

After expiry of the previous TTL the traffic should cease, at least we
already see a steady decrease.

-Peter