[dns-operations] Weird TXT record

[Calvin Browne]

On Mon, 2011-06-20 at 12:00 +0000,
dns-operations-request at lists.dns-oarc.net wrote:
<SNIP>
> Julian DeMarchi <julian at jdcomputers.com.au> wrote:
> 
> > Noticed a weird query on one of my DNS resolvers.
> >
> > dig 3371.rr.nu TXT
> >
> > This returns a massive TXT record. Is this a new/existing method to DOS
> > a DNS server?
> 
> There was a rash of DNS reflector attacks in 2006 that used similar
> TXT records.  Here's a VeriSign analysis of the attack technique
> from April 2006:
> 
> 	http://www.verisign.com/static/037903.pdf
> 
> Geoff

It was fun being on the receiving end of that call from verisign...

--Calvin