[dns-operations] DNS deluge for x.p.ctrc.cc

[william(at)elan.net]

On Sun, 26 Feb 2006, Rob Thomas wrote:

> Hi, team.
>
> ] indeed, i have heard such talk, and OARC might shortly become involved in
> ] creating a BGP feed that covers tested-to-be-recursive recently-abused
> ] nameservers.
>
> That might not scale so nicely.  As you know, we have done similar
> feeds using BGP, and scalability is a challenge.
>
> During one DNS amplification attack we tracked approximately 122K
> recursive name servers used as amplifiers.  That's just a bit
> under a current full view.  :)

What is a rate of changes in those lists?

And how do you delete nameservers or do you really test all 122k of
them every so often to see if they are recursive?

-- 
William Leibzon
Elan Networks
william at elan.net