[dns-operations] Resolution of sandia.gov from Verizon

[Timothy Morizot]

On Tue, Oct 29, 2013 at 6:38 PM, Casey Deccio <casey at deccio.net> wrote:

> On Tue, Oct 29, 2013 at 12:42 PM, Casey Deccio <casey at deccio.net> wrote:
>
>> I seem to be having trouble resolving names in sandia.gov from Verizon
>> Wireless resolvers (well, one at least), which are giving me REFUSED
>> responses.  Other names, in .gov and otherwise, resolve just fine.  Anyone
>> know anything?
>>
>>
> Apparently verizon's resolvers are being hit with a high number of queries
> for sandia.gov (ANY?), for which they've begun refusing queries for
> sandia.gov altogether.  These resolvers aren't generally "open" (as far
> as I can tell), which means that if these are being used for
> amplification/reflection (the latter they have not fixed by sending REFUSED
> messages), the target ("source") is verizon's own.
>
> In the mean time, Sandia is inaccessible to legitimate verizon customers.
>
>
A clueless response to a DNS amplification/reflection attack was my first
thought when I saw the refused response in your initial message, so I'm not
surprised to hear it.

Scott
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20131029/73874caa/attachment.html>