On 16/04/13 14:04, Denis Laventure wrote:
These seems like some attack going on, after reading the mails i also check my
recursive server and found a lot of these in my logs:
my server is not an open recursive server its only open to my clients and these
are not even from my country.
Same here, my DNS are open to my clients only and are not open resolver. Good
to see that I'm not the only one with that problem.
Finally, I got this list of IPs blocked on my firewall and I don't have issue
anymore for now :
Instead of blocking the source (which aren't even real - they're
spoofed) why not just block access to your recursive resolver on port 53.
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users