lot of 'ripe.net IN ANY +ED' queries
marek_sal at wp.pl
Mon Jul 23 12:07:51 UTC 2012
I am new subscriber of your list.
I browsed the archive but didn't find answer/hint for my problem.
I am running (at FreeBSD 9.1-PRERELEASE) public caching DNS server.
Since about 2 months I've been receiving lot of (DNS flood attack?)
23-Jul-2012 14:03:28.813 queries: info: client 18.104.22.168#53: view
external: query: ripe.net IN ANY +ED (my.dns.server.ip)
What I made now, is just to parse logs and block IPs that ask for
ripe.net via ipfw.
But is there any other solutions for that permanent attacks?
Or should I contact my ISP ?
Thanks for help!
More information about the bind-users