On Wednesday 11 May 2005 03:57, Simon Waters wrote:
Indeed moderns versions of BIND default to high ports for DNS queries as
well unless configured otherwise. I think old versions of BIND and the odd
firewall product were the main thing doing source port 53 queries.
I was going to suggest
Since about 03:00 UTC this morning I've been seeing a huge increase in IN
ANY requests for msn.com.. While my name servers have not seen much, if
any, IN ANY queries in the past, now I'm seeing ~ 50 queries/second. I'll
include a tcpdump sample below.
Actually, while I was writing this post
On Tuesday 10 May 2005 12:14, Duane Wessels wrote:
One thing I've noticed that likes to generate ANY queries is Qmail...
I guess I should've stated that these are almost all some DSL customers on our
network using their assigned DNS servers, but this traffic is just completely
out of normal;
