[dns-operations] DNS deluge for x.p.ctrc.cc

william(at)elan.net william at elan.net
Sun Feb 26 17:12:51 UTC 2006

On Sun, 26 Feb 2006, Rob Thomas wrote:

> Hi, team.
> ] indeed, i have heard such talk, and OARC might shortly become involved in
> ] creating a BGP feed that covers tested-to-be-recursive recently-abused
> ] nameservers.
> That might not scale so nicely.  As you know, we have done similar
> feeds using BGP, and scalability is a challenge.
> During one DNS amplification attack we tracked approximately 122K
> recursive name servers used as amplifiers.  That's just a bit
> under a current full view.  :)

What is a rate of changes in those lists?

And how do you delete nameservers or do you really test all 122k of
them every so often to see if they are recursive?

William Leibzon
Elan Networks
william at elan.net

More information about the dns-operations mailing list