[dns-operations] annoying DDoS attack on ns0.rfc1035.com

Dobbins, Roland rdobbins at arbor.net
Sun Jun 10 08:59:03 UTC 2012

On Jun 10, 2012, at 3:45 PM, Jim Reid wrote:

> And why pick on my name server which has never done anyone any harm?

They're just looking for ANY records, there's no rhyme or reason to it.  They're spoofing the IP address of the target they're attacking - they're using your server for reflection/amplification.

Do you really need to respond to ANY queries - especially when your servers are being abused?

Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton

More information about the dns-operations mailing list