North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: DOS attack against DNS?

  • From: bmanning
  • Date: Sun Jan 15 17:25:50 2006

On Sun, Jan 15, 2006 at 05:27:40PM +0000, Paul Vixie wrote:
> 
> > client xx.xx.xx.xx#6704: query: z.tn.co.za ANY ANY +E
> 
> class "ANY" has no purpose in the real world, not even for debugging.  if
> you see it in a query, you can assume malicious intent.  if you hear it in
> a query, you can safely ignore that query, or at best, map it to class "IN".
> -- 
> Paul Vixie

	er... i guess that is true, although the DNS does work for 
	things other than IP based networks...  dispite our respective
	best efforts to cripple it.

--bill