On 16/04/13 14:04, Denis Laventure wrote:
These seems like some attack going on, after reading the mails i also check my 
recursive server and found a lot of these in my logs:
my server is not an open recursive server its only open to my clients and these 
are not even from my country.

Same here, my DNS are open to my clients only and are not open resolver. Good 
to see that I'm not the only one with that problem.

Finally, I got this list of IPs blocked on my firewall and I don't have issue 
anymore for now :

Instead of blocking the source (which aren't even real - they're spoofed) why not just block access to your recursive resolver on port 53.
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to