[dns-operations] annoying DDoS attack on ns0.rfc1035.com

[Dobbins, Roland]

On Jun 10, 2012, at 3:45 PM, Jim Reid wrote:

> And why pick on my name server which has never done anyone any harm?

They're just looking for ANY records, there's no rhyme or reason to it.  They're spoofing the IP address of the target they're attacking - they're using your server for reflection/amplification.

Do you really need to respond to ANY queries - especially when your servers are being abused?

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton