Thus said "Ryan Simpkins" on Wed, 19 May 2010 20:35:18 MDT: > What that means is that your primary DNS servers are getting pounded > (check the size of your logs and the load on your DNS primaries!). All > those cache poising attempts filling up your logs? I'm surprised this > hasn't hit the press yet. I can't imagine too many folks interested in > DNS are happy about this.
I haven't noticed an increase at all (neither log size nor load), but then my DNS servers and resolvers are all djbdns so I can sleep well at night. :-) Oddly enough, I notice that one of my tertiary DNS server seems to be serving double what the primary and secondary do, however, I cannot say that this is due to Verisign at this point (certainly not based upon what you describe). By the way, are you sure that they always did round-robin publishing of the NS records for domains? I haven't ever paid it much attention, but to my recollection NS records have always been served in order. Andy /* PLUG: http://plug.org, #utah on irc.freenode.net Unsubscribe: http://plug.org/mailman/options/plug Don't fear the penguin. */
