On Tue, Oct 29, 2013 at 6:38 PM, Casey Deccio <[email protected]> wrote:
> On Tue, Oct 29, 2013 at 12:42 PM, Casey Deccio <[email protected]> wrote: > >> I seem to be having trouble resolving names in sandia.gov from Verizon >> Wireless resolvers (well, one at least), which are giving me REFUSED >> responses. Other names, in .gov and otherwise, resolve just fine. Anyone >> know anything? >> >> > Apparently verizon's resolvers are being hit with a high number of queries > for sandia.gov (ANY?), for which they've begun refusing queries for > sandia.gov altogether. These resolvers aren't generally "open" (as far > as I can tell), which means that if these are being used for > amplification/reflection (the latter they have not fixed by sending REFUSED > messages), the target ("source") is verizon's own. > > In the mean time, Sandia is inaccessible to legitimate verizon customers. > > A clueless response to a DNS amplification/reflection attack was my first thought when I saw the refused response in your initial message, so I'm not surprised to hear it. Scott
_______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
