[dns-operations] DNS deluge for x.p.ctrc.cc

Rob Thomas robt at cymru.com
Sun Feb 26 17:38:04 UTC 2006


Hi, William.

] What is a rate of changes in those lists?

Fairly high.  The miscreants behind most (if not all) of these
attacks are scanning close to 24x7.

] And how do you delete nameservers or do you really test all 122k of
] them every so often to see if they are recursive?

Our present systems depend on such revetting.  We revet those
entries every seven days.  I'd say we'd want the same system
in place for this feed.

Thanks,
Rob.
-- 
Rob Thomas
Team Cymru
http://www.cymru.com/
ASSERT(coffee != empty);




More information about the dns-operations mailing list