Date: Wed, 11 Jun 2008 09:15:27 -0400 From: Jon Radel <jon@radel.com> To: Ted Mittelstaedt <tedm@toybox.placo.com> Cc: Wojciech Puchar <wojtek@wojtek.tensor.gdynia.pl>, freebsd-questions@freebsd.org Subject: Re: OT: lots of IPv6 DNS requests Message-ID: <484FCFEF.5000109@radel.com> In-Reply-To: <BMEDLGAENEKCJFGODFOCGELOCFAA.tedm@toybox.placo.com> References: <BMEDLGAENEKCJFGODFOCGELOCFAA.tedm@toybox.placo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
Ted Mittelstaedt wrote:
>
>
>> -----Original Message-----
>> From: owner-freebsd-questions@freebsd.org
>> [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of Jon Radel
>> Sent: Tuesday, June 10, 2008 4:02 PM
>> To: Wojciech Puchar
>> Cc: freebsd-questions@freebsd.org
>> Subject: Re: OT: lots of IPv6 DNS requests
>>
>
>> Nameservers are hitting an address of yours. Therefore something is
>> probably handing out your address. Somebody (that would be me) has
>> looked up the address in question and even looked up the nameserver
>> which is handing out that address in a glue record.
>
> A simple problem EASILY solved.
>
> Why bother the owner of the misconfigured nameserver?
>
> Instead, simply insert a wildcard record to your namesever
> that hands out the IP number of the nastiest porno site you
> can find to any DNS query.
>
> After a few days the owners of the misconfigured nameservers
> or clients will go hunting for whatever is poisoning their cache.
>
> Problem solved.
>
> Ted
Silly me, I've always believed that people setup nameservers because
they want their resources to be found. Having one the parents of your
zone point to a random machine of yours, which you then use to serve
crap records, strikes me as somewhat counterproductive. And I really
fail to see why whomever runs the parent zone would even notice. So I
rather suspect that the log messages which so traumatize Wojciech would
continue.
Problem not solved.
--Jon Radel
[-- Attachment #2 --]
0 *H
01 0 + 0 *H
100\mtv0
*H
0b1 0 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA0
080324165921Z
090324165921Z0^10 URadel10U*
Jon Thomas10UJon Thomas Radel1 0 *H
jon@radel.com0"0
*H
0
t,P p#
٬q_2=L-^m >z3ʟV![([ AoE}ϛ3/6?cWx(/)'$6sTl<*i'=uox Mbt
rdtnxud1R6T>zU0FZ,vN9NP{>qE`^P; *Wg/jN*OVՠQMB(=:
*0(0U 0
jon@radel.com0 U 0 0
*H
h!oܨ[А!fN#[Z
b$3?x&$~Ħ9}`MX[It}/bXZajgxɥ' 2NrtWAr sFި'^@mDVw\)00\mtv0
*H
0b1 0 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA0
080324165921Z
090324165921Z0^10 URadel10U*
Jon Thomas10UJon Thomas Radel1 0 *H
jon@radel.com0"0
*H
0
t,P p#
٬q_2=L-^m >z3ʟV![([ AoE}ϛ3/6?cWx(/)'$6sTl<*i'=uox Mbt
rdtnxud1R6T>zU0FZ,vN9NP{>qE`^P; *Wg/jN*OVՠQMB(=:
*0(0U 0
jon@radel.com0 U 0 0
*H
h!oܨ[А!fN#[Z
b$3?x&$~Ħ9}`MX[It}/bXZajgxɥ' 2NrtWAr sFި'^@mDVw\)0?0
0
*H
01 0 UZA10U Western Cape10U Cape Town10U
Thawte Consulting1(0&U Certification Services Division1$0"UThawte Personal Freemail CA1+0) *H
personal-freemail@thawte.com0
030717000000Z
130716235959Z0b1 0 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA00
*H
0 Ħ<UsUNʙZ hup [v :aQP
0cZ,p+Z?qV˯< 6$*+w=+>@dקe*TH<a@ dr` 00U 0 0CU <0:08642http://crl.thawte.com/ThawtePersonalFreemailCA.crl0 U 0)U "0 0 10UPrivateLabel2-1380
*H
HP .
fgCL!6 -6/ P p<ab:~ t%Pb'qW%ݩ9 Oe_N4[5MwV!x!5$ F]_eO1d0`0v0b1 0 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CAmtv0 + 0 *H
1 *H
0 *H
1
080611131527Z0# *H
1}(P 0R *H
1E0C0
*H
0*H
0
*H
@0+0
*H
(0 +71x0v0b1 0 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CAmtv0 *H
1xv0b1 0 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CAmtv0
*H
̀8lQ1ѬU <pi{hŎ)|<;2_c5A?n/V 5F94O+>rqoE1wX紕^kqJ
lYL uo O"/ RIo]h?q^-L8Hs6X)| b ^Y rς1rC 5 5qS,U~88jtAhUJQ 29<74˲
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?484FCFEF.5000109>