[dns-operations] DNS replies from AS 4808

[sthaug at nethelp.no]

> Apparently, some of the queries to SURBL mirrors appear to be  
> hijacked during transit through Chinese address space.
> So, queries to resources like "twitter.com.multi.surbl.org" that is  
> expected to result in NXDOMAIN, behave this way when it goes toward,  
> k5.surbl.org, located on China Unicom:

Are you sure this isn't related to Chinese government blocking of
Twitter, Flickr, Wordpress, Blogger etc? According to the trade rags
over here, a number of additional blocks have been put in place in the
last few days, presumably because on Thursday it is 20 years since the
Tiananmen Square protests and massacre.

Steinar Haug, Nethelp consulting, sthaug at nethelp.no