Sierra Leone (.sl) TLD
Meir Kraushar
meir at isoc.org.il
Mon Feb 24 11:47:41 UTC 2025
On Mon, Feb 24, 2025 at 12:40 PM Stephane Bortzmeyer <bortzmeyer at nic.fr>
wrote:
> On Sun, Feb 23, 2025 at 02:25:02PM +0200,
> Meir Kraushar via dns-operations <dns-operations at dns-oarc.net> wrote
> a message of 135 lines which said:
>
> > The reply size of "dig sl any" is 5814 (!)
>
Which is probably not so useful for reflection attacks since very few
> name servers will serve this size over UDP.
>
This dig query was just a simple example to show the size or response, the
actual manner is of course different.
I do not know which servers allowed it, but the fact is that the targeted
victim saw on their network loads of fragmented UDP packets , and when
analyzing the content it led to .sl response.
Note that oracle.com is 3458 just with TXT QNAME.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20250224/5ad33113/attachment.html>
More information about the dns-operations
mailing list