[dns-operations] swiss cheese

[Patrik Fältström]

Turn on rate limiting in your DNS server.

   Patrik

On 10 jan 2013, at 08:08, Randy Bush <randy at psg.com> wrote:

> kiddies are out this afternoon.  no big deal, no real services but this
> makes uplinks prety ugly
> 
> turning off dnssec no real help
> 
> 108.193.206.169 is not the only source.  and i presume it is spoofed anyway.
> 
> clue bat?
> 
> randy
> 
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net: udp
> 06:28:26.448671 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448676 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448679 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448681 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448712 IP rip.psg.com.domain >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net.39939: 22943*- 19/0/14
> SOA, RRSIG, RRSIG, Type51, RRSIG, RRSIG, RRSIG, RRSIG, RRSIG,
> DNSKEY[|domain]
> 06:28:26.448714 IP rip.psg.com >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net: udp
> 06:28:26.448725 IP rip.psg.com.domain >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net.39939: 22943*- 19/0/14
> SOA, RRSIG, RRSIG, Type51, RRSIG, RRSIG, RRSIG, RRSIG, RRSIG,
> DNSKEY[|domain]
> 06:28:26.448727 IP rip.psg.com.domain >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net.39939: 22943*- 19/0/14
> SOA, RRSIG, RRSIG, Type51, RRSIG, RRSIG, RRSIG, RRSIG, RRSIG,
> DNSKEY[|domain]
> 06:28:26.448730 IP rip.psg.com >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net: udp
> 06:28:26.448731 IP rip.psg.com >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net: udp
> 06:28:26.448791 IP rip.psg.com.domain >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net.39939: 22943*- 19/0/14
> SOA, RRSIG, RRSIG, Type51, RRSIG, RRSIG, RRSIG, RRSIG, RRSIG,
> DNSKEY[|domain]
> 06:28:26.448794 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448795 IP rip.psg.com >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net: udp
> 06:28:26.448800 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448802 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448805 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448807 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448809 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448811 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448814 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448817 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448819 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448833 IP rip.psg.com.domain >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net.39939: 22943*- 19/0/14
> SOA, RRSIG, RRSIG, Type51, RRSIG, RRSIG, RRSIG, RRSIG, RRSIG,
> DNSKEY[|domain]
> 06:28:26.448835 IP rip.psg.com >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net: udp
> 06:28:26.448865 IP rip.psg.com.domain >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net.39939: 22943*- 19/0/14
> SOA, RRSIG, RRSIG, Type51, RRSIG, RRSIG, RRSIG, RRSIG, RRSIG,
> DNSKEY[|domain]
> 06:28:26.448867 IP rip.psg.com >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net: udp
> 06:28:26.448918 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448922 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448924 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448927 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448930 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448931 IP rip.psg.com.domain >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net.39939: 22943*- 19/0/14
> SOA, RRSIG, RRSIG, Type51, RRSIG, RRSIG, RRSIG, RRSIG, RRSIG,
> DNSKEY[|domain]
> 06:28:26.448933 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448934 IP rip.psg.com >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net: udp
> 06:28:26.448937 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448939 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448943 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448945 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448948 IP 108-193-206-169.lightspeed.frsnca.sbcglobal.net.6799 >
> rip.psg.com.domain: 22943+ [1au] ANY? CH. (31)
> 06:28:26.448960 IP rip.psg.com.domain >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net.39939: 22943*- 19/0/14
> SOA, RRSIG, RRSIG, Type51, RRSIG, RRSIG, RRSIG, RRSIG, RRSIG,
> DNSKEY[|domain]
> 06:28:26.448963 IP rip.psg.com.domain >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net.39939: 22943*- 19/0/14
> SOA, RRSIG, RRSIG, Type51, RRSIG, RRSIG, RRSIG, RRSIG, RRSIG,
> DNSKEY[|domain]
> 06:28:26.448965 IP rip.psg.com >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net: udp
> 06:28:26.448968 IP rip.psg.com >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net: udp
> 06:28:26.448993 IP rip.psg.com.domain >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net.39939: 22943*- 19/0/14
> SOA, RRSIG, RRSIG, Type51, RRSIG, RRSIG, RRSIG, RRSIG, RRSIG,
> DNSKEY[|domain]
> 06:28:26.448995 IP rip.psg.com >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net: udp
> 06:28:26.449064 IP rip.psg.com.domain >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net.39939: 22943*- 19/0/14
> SOA, RRSIG, RRSIG, Type51, RRSIG, RRSIG, RRSIG, RRSIG, RRSIG,
> DNSKEY[|domain]
> 06:28:26.449066 IP rip.psg.com >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net: udp
> 06:28:26.449090 IP rip.psg.com.domain >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net.39939: 22943*- 19/0/14
> SOA, RRSIG, RRSIG, Type51, RRSIG, RRSIG, RRSIG, RRSIG, RRSIG,
> DNSKEY[|domain]
> 06:28:26.449092 IP rip.psg.com >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net: udp
> 06:28:26.449119 IP rip.psg.com.domain >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net.39939: 22943*- 19/0/14
> SOA, RRSIG, RRSIG, Type51, RRSIG, RRSIG, RRSIG, RRSIG, RRSIG,
> DNSKEY[|domain]
> 06:28:26.449121 IP rip.psg.com.domain >
> 108-193-206-169.lightspeed.frsnca.sbcglobal.net.39939: 22943*- 19/0/14
> SOA, RRSIG, RRSIG, Type51, RRSIG, RRSIG, RRSIG, RRSIG, RRSIG,
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs