Well, that or is spoofing my honeypot address so that legitimate sites respond to it. sigh What a bunch of sad fucks...
----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest Internet Exchange http://www.midwest-ix.com ----- Original Message ----- From: "Mike Hammett via Unbound-users" <[email protected]> Cc: [email protected] Sent: Monday, November 2, 2015 12:37:57 PM Subject: Re: Problems resolving a domain Source of the problem: My honeypot blacklist rules on my border router. Any scans that hit my honey pot IP get thrown into an address list. That address list is dropped at the border. Someone spoofed the IPs of those nameservers. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest Internet Exchange http://www.midwest-ix.com ----- Original Message ----- From: "Mike Hammett via Unbound-users" <[email protected]> To: [email protected] Sent: Sunday, October 25, 2015 10:18:40 AM Subject: Problems resolving a domain http://pastebin.com/Sux9B0PW Anyone see why anidb.net can't be resolved through my Unbound server? it's been an ongoing issue for a few months on two of my Unbound boxes. It works elsewhere. I couldn't find anything useful in the log, but I'm far from an expert. I set syslog to allow 2000 entries per second (otherwise I'd hit a ratelimiter). I also set Unbound to a verbose level of 5. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest Internet Exchange http://www.midwest-ix.com
