[dns-operations] Weird TXT record

[Geoffrey Sisson]

Julian DeMarchi <julian at jdcomputers.com.au> wrote:

> Noticed a weird query on one of my DNS resolvers.
>
> dig 3371.rr.nu TXT
>
> This returns a massive TXT record. Is this a new/existing method to DOS
> a DNS server?

There was a rash of DNS reflector attacks in 2006 that used similar
TXT records.  Here's a VeriSign analysis of the attack technique
from April 2006:

	http://www.verisign.com/static/037903.pdf

Geoff