[as112-ops] hidden secondary for iana.org?

[William F. Maton Sotomayor]

On Wed, 20 May 2009, Aleksi Suhonen wrote:

> I wrote:
>>> I see queries for prisoner.iana.org and blackhole-#.iana.org quite
>>> often on our AS112 server
>
> Joe Abley wrote:
>> That's interesting. Do you have any idea why?
>> are there clients which normally send queries for IANA.ORG to the
>> AS112 servers, just for fun?
>
> Yes, I suspect this is so. I also see a lot of other queries that have 
> nothing to do with in-addr.arpa. on the surface.

I think running something like DSC to analyze this would be a good thing 
to do.  That, or I can make a plug for all AS112 operators to run ncaptool 
and funnel the results of that directly to ISC for further analysis. 
(Come to think of it I need to put Frank's tutorial online too.)

> Well if you want to argue for the futility, then the whole AS112 prefix could 
> just as well be black-holed, since what the servers mostly do is send 
> negative answers to addresses whose reverse path doesn't exist.
> I was just trying to be a bit more constructive. :-)

As Joe already stated, exposing the badness to the light may do some good 
to cure it.  Besides, I got tired of being asked by people sitting behind 
NAT boxes with poorly administrated DNS servers why 'their Internet was 
slow'.

wfms