loads of Query denied... is it an attack or a misconfiguration ?

Stephane Bortzmeyer bortzmeyer at nic.fr
Wed Feb 11 07:58:24 UTC 2009


On Wed, Feb 11, 2009 at 01:35:31AM +0100,
 Thomas Manson <dev.mansonthomas at gmail.com> wrote 
 a message of 80 lines which said:

> I'll temporray block the ip on my firewall

Very bad idea, since it is forged. You do exactly what the attacker
wanted you to do.

The proper thing to do is:

https://www.dns-oarc.net/oarc/articles/upward-referrals-considered-harmful



More information about the bind-users mailing list