[dns-operations] Queries for isc.org/ANY/IN

[Sebastian Wiesinger]

* Stephane Bortzmeyer <bortzmeyer at nic.fr> [2012-01-09 09:25]:
> On Mon, Jan 09, 2012 at 12:45:56AM +0100,
>  Sebastian Wiesinger <dns-operations at ml.karotte.org> wrote 
>  a message of 38 lines which said:
> 
> > There are the Top 10 clients for this query in the last 24 hours:
> 
> If it is (and it probably is) a DoS attack by amplification (the reply
> to "isc.org ANY +dnssec" is large), then the source IP address is
> forged. It is the address of the victim, not of the attacker.

Hi,

good point, that's very likely.

I'm curious why it suddenly started on my system but as it seems I'm
just late for the party.

Regards

Sebastian

-- 
GPG Key: 0x93A0B9CE (F4F6 B1A3 866B 26E9 450A  9D82 58A2 D94A 93A0 B9CE)
'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE.
            -- Terry Pratchett, The Fifth Elephant