lot of 'ripe.net IN ANY +ED' queries
    Marek Salwerowicz 
    marek_sal at wp.pl
       
    Mon Jul 23 12:07:51 UTC 2012
    
    
  
Hi all,
I am new subscriber of your list.
I browsed the archive but didn't find answer/hint for my problem.
I am running (at FreeBSD 9.1-PRERELEASE) public caching DNS server.
Since about 2 months I've been receiving lot of (DNS flood attack?) 
queries like:
23-Jul-2012 14:03:28.813 queries: info: client 96.44.152.125#53: view 
external: query: ripe.net IN ANY +ED (my.dns.server.ip)
What I made now, is just to parse logs and block IPs that ask for 
ripe.net via ipfw.
But is there any other solutions for that permanent attacks?
Or should I contact my ISP ?
Thanks for help!
Regards,
-- 
Marek Salwerowicz
    
    
More information about the bind-users
mailing list