lot of 'ripe.net IN ANY +ED' queries

Marek Salwerowicz marek_sal at wp.pl
Mon Jul 23 12:07:51 UTC 2012

Hi all,

I am new subscriber of your list.
I browsed the archive but didn't find answer/hint for my problem.

I am running (at FreeBSD 9.1-PRERELEASE) public caching DNS server.
Since about 2 months I've been receiving lot of (DNS flood attack?) 
queries like:

23-Jul-2012 14:03:28.813 queries: info: client view 
external: query: ripe.net IN ANY +ED (my.dns.server.ip)

What I made now, is just to parse logs and block IPs that ask for 
ripe.net via ipfw.

But is there any other solutions for that permanent attacks?
Or should I contact my ISP ?

Thanks for help!


Marek Salwerowicz

More information about the bind-users mailing list