On Wed, May 14, 2014 at 11:32:07PM +0100, Steven Chamberlain wrote: > On 14/05/14 23:00, Luca Filipozzi wrote: > > I looked at the logs on ns1.debian.org through ns4.debian.org for the last > > week. Not a single request that wasn't for SOA or RRSIG or DNSKEY, all from > > debian machines. > > > > Some may have gone to easydns' name servers, I suppose, but the debian > > nameservers were still set as authoritative. > > Didn't that seem suspicious? In a whole week not even a single query by > a webcrawler/spambot? > > AFAICT *only* easynet's and one rcode0.net nameserver serve as > authoritatve nameservers for the debian.net SOA? So unless something > changed recently, it is expected you would see ns[1-4].debian.org only > doing zone transfers but not serving legitimate queries?
mirror.debian.net was delegated. > In the last week at least 13 of my own servers/VMs at two sites (each > site has a caching DNS resolver), my desktop and also my laptop from > offsite have been querying this zone, every day. I debootstrapped a new > chroot using this zone only two days ago. I'll put it back in for a week, see what queries we get. -- Luca Filipozzi http://www.crowdrise.com/SupportDebian -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20140514223451.ga25...@emyr.net