This afternoon I received 292 log items in 6 seconds. I know that
port 53 is related to DNS but beyond that I am fairly naive. The log
analyzer at http://www.echogent.com/cgi-bin/fwlog.pl did not have any
thin specific to say about these It is interesting to me that all 18
of the ips that sent
On Thu, 25 Oct 2001 17:49:35 PDT Robert wrote:
> This afternoon I received 292 log items in 6 seconds.
There was a lot of discussion of these floods on the linux-router
list in late April and May of this year. IIRC, they are response
time measurement probes that are part of a global load-balan
I found the same thing in my logs yesterday. I was worried I had my name
server misconfigured. Phew.
-Steve
On Thursday, October 25, 2001, at 09:58 PM, Brad Fritz wrote:
>
> On Thu, 25 Oct 2001 17:49:35 PDT Robert wrote:
>
>> This afternoon I received 292 log items in 6 seconds.
>
> There was
<[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Thursday, October 25, 2001 11:58 PM
Subject: Re: [Leaf-user] DNS flood?
>
> On Thu, 25 Oct 2001 17:49:35 PDT Robert wrote:
>
> > This afternoon I received 292 log items in 6 seconds.
>
> There was a lot of discussion of
> I've checked, double checked, and triple checked this a number of times -
> the culprit is ads.x10.com. Every time I see this ad, I check my lrp.
> Consistently, this is the onlysite for me that causes this DNS flood in my
> logs. Unfortunately, this ad site is attaching to more and more web s
On Fri, 26 Oct 2001 14:44:02 -0300 you wrote:
> Brad, when you go to Weather.com, do you happen to notice one of those
> stupid "pop-under" ads from x10.com?
It's been a long time since I've been to weather.com (because of
the irritating popups, and overuse of graphics and applets), but
I do se
Robert-
I used several ideas that were offered on this board
to put together a general solution for this problem on
the assumption that this load balancing act is the
Internet of the future. I've noticed this happening
with UDP packets also.
I have two files: /etc/dns_tcp_floods and
/etc/dns_udp
