lot of 'ripe.net IN ANY +ED' queries

Marek Salwerowicz marek_sal at wp.pl
Mon Jul 23 12:07:51 UTC 2012


Hi all,

I am new subscriber of your list.
I browsed the archive but didn't find answer/hint for my problem.

I am running (at FreeBSD 9.1-PRERELEASE) public caching DNS server.
Since about 2 months I've been receiving lot of (DNS flood attack?) 
queries like:

23-Jul-2012 14:03:28.813 queries: info: client 96.44.152.125#53: view 
external: query: ripe.net IN ANY +ED (my.dns.server.ip)

What I made now, is just to parse logs and block IPs that ask for 
ripe.net via ipfw.

But is there any other solutions for that permanent attacks?
Or should I contact my ISP ?

Thanks for help!

Regards,

-- 
Marek Salwerowicz



More information about the bind-users mailing list