On 24 Oct 2019, at 11:03, Daniel Stirnimann wrote: > I tried. It turned out to be an open resolver with dnsmasq and DNS > forwarding to our resolver. :-/ That was actually my guess — an open recursor/forwarder. Thanks much! -------------------------------------------- Roland Dobbins <roland.dobbins at netscout.com>