[as112-ops] uceb.org "A" queries on AS112

Nick Hilliard nick at inex.ie
Mon Jul 28 16:36:55 UTC 2008


 > The
> hot-headed part of me is howling to add the blackholes.uceb.org zone to 
> the dns config on this box and reply with 127.0.0.2 for 
> *.blackholes.uceb.org.

Post-{lunch,chocolate}, the less hot-headed part of me is looking at 
deflecting these queries away from our server by configuring the nameserver 
to become authoritative for blackholes.uceb.org, and filling the zone up 
with something like:

$GENERATE 0-255 $.blackholes.uceb.org.	IN NS	1.1.1.1

... to instruct the querying nameserver to go away and query a non-existent 
address.  This will cause time-outs for the application attempting to use 
the uceb.org service - annoying but no-one's going to lose email - and a 
drop in traffic for the AS112 box.

Nick
-- 
Network Ability Ltd. | Head of Operations      | Tel: +353 1 6169698
3 Westland Square    | INEX - Internet Neutral | Fax: +353 1 6041981
Dublin 2, Ireland    | Exchange Association    | Email: nick at inex.ie


More information about the as112-ops mailing list