DOS attack against DNS?

bmanning at vacation.karoshi.com bmanning at vacation.karoshi.com
Sun Jan 15 22:24:38 UTC 2006


On Sun, Jan 15, 2006 at 05:27:40PM +0000, Paul Vixie wrote:
> 
> > client xx.xx.xx.xx#6704: query: z.tn.co.za ANY ANY +E
> 
> class "ANY" has no purpose in the real world, not even for debugging.  if
> you see it in a query, you can assume malicious intent.  if you hear it in
> a query, you can safely ignore that query, or at best, map it to class "IN".
> -- 
> Paul Vixie

	er... i guess that is true, although the DNS does work for 
	things other than IP based networks...  dispite our respective
	best efforts to cripple it.

--bill



More information about the NANOG mailing list