On 27 Apr 2015, at 11:56, Randy Bush wrote:
looks normal except the server is not (supposed to be) recursive
It would be really interesting to see the actual RRs being queried - see if they look like some of the prepending attacks we've seen, or something else.
Most of the prepending attacks are for A records, AFAIK. ----------------------------------- Roland Dobbins <[email protected]> _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
