[dns-operations] .tr DDOS

[sthaug at nethelp.no]

> > Still ongoing (we unfortunately have some customers with open DNS
> > proxies - so we can see this happeing on our resolvers).
> 
> Can you share infos on the QNAME/QTYPE used? The important point is
> that, unlike what happened on 14 december, all name servers of .tr
> work.

Looks like mostly ANY queries for nic.tr from here.

Steinar Haug, AS 2116