[dns-operations] Resolution of sandia.gov from Verizon
tmorizot at gmail.com
Wed Oct 30 02:01:25 UTC 2013
On Tue, Oct 29, 2013 at 6:38 PM, Casey Deccio <casey at deccio.net> wrote:
> On Tue, Oct 29, 2013 at 12:42 PM, Casey Deccio <casey at deccio.net> wrote:
>> I seem to be having trouble resolving names in sandia.gov from Verizon
>> Wireless resolvers (well, one at least), which are giving me REFUSED
>> responses. Other names, in .gov and otherwise, resolve just fine. Anyone
>> know anything?
> Apparently verizon's resolvers are being hit with a high number of queries
> for sandia.gov (ANY?), for which they've begun refusing queries for
> sandia.gov altogether. These resolvers aren't generally "open" (as far
> as I can tell), which means that if these are being used for
> amplification/reflection (the latter they have not fixed by sending REFUSED
> messages), the target ("source") is verizon's own.
> In the mean time, Sandia is inaccessible to legitimate verizon customers.
A clueless response to a DNS amplification/reflection attack was my first
thought when I saw the refused response in your initial message, so I'm not
surprised to hear it.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the dns-operations