Re: strange queries in my DNS

2011-04-25 Thread Victor Hugo dos Santos
On Fri, Apr 22, 2011 at 3:34 AM, Matthew Seaman m.sea...@infracaninophile.co.uk wrote: Hello Matthew, This is an attempt to use your DNS servers as a traffic amplifier in a DoS attack.  By sending a spoofed query for the root '.' the attackers cause your DNSes to send kilobytes of the root

Re: strange queries in my DNS

2011-04-25 Thread Matthew Seaman
On 25/04/2011 13:30, Victor Hugo dos Santos wrote: Yes.. I already readed about DNS amplifier attack.. but in amplification attack, the query is about ., but in my case, the queries isn't by the root, but for unused type No -- confusion of terms: '.' is the *root* of the DNS hierarchy.

Re: strange queries in my DNS

2011-04-22 Thread Matthew Seaman
On 21/04/2011 19:54, Victor Hugo dos Santos wrote: Hello masters. the last week I had a strange queries logged in my DNS. In this momment I only block the IP (77.204.11.139) source and forguet of this theme. but, today.. I have the same query registered in my logs and from other source

strange queries in my DNS

2011-04-21 Thread Victor Hugo dos Santos
Hello masters. the last week I had a strange queries logged in my DNS. In this momment I only block the IP (77.204.11.139) source and forguet of this theme. but, today.. I have the same query registered in my logs and from other source (208.100.46.116). == 21-Apr-2011 15:20