DNS "A" query for a single dot
kcd at chrysler.com
Tue Mar 11 03:52:37 UTC 2008
> Hello ,
> Does anybody knows what an "A" query for a dot (".") means?
> Is it part of DNS and serve a special purpose?
> Is it a bug on the client making the query?
> Is it an indicative of a bot/worm making queries?
> I am parsing the DNS packet using the name server library (function
> ns_initparse) and some DNS packets have questions for "."
"." is the root zone. It makes no sense to query the root zone for an A
record, either for legitimate or for nefarious purposes; never attribute
to malice what can be explained by stupidity.
More information about the bind-users