Open Resolver Problems

Wed Mar 27 02:13:43 UTC 2013

On Mar 26, 2013, at 7:04 PM, Matthew Petach <mpetach at netflight.com> wrote:

> On Tue, Mar 26, 2013 at 6:06 PM, John Levine <johnl at iecc.com> wrote:
>>> As a white-hat attempting to find problems to address through legitimate means, how
>>> do you …
>> 
>> You make friends with people with busy authoritative servers and see
>> who's querying them.
> 
> I'm confused.  Don't most authoritative servers have to
> answer to just about anyone in order to be useful?

If you give the same answer 15x to the same person in a few seconds one can possibly infer they aren't a caching resolver or are broken. Either way you can think about ignoring them for a few with dampening or similar. 