Named requests filling up T1

[Mike Silbersack]

> Thanks Matt,
>
> The answer to both is no. The domain doesn't resolve either
> (v.tn.co.za). It looks like the source IP changes too...sigh.... I tried
> a whois on the source IP and it was not found, so it may be spoofed? Or
> someone has a very messed up server...

There was a thread on bugtraq about this, you're either being attacked or
are being used to attack someone else.

Reconfigure BIND so that it ignores recursive queries originating from
outside your network - at least that will save your outbound bandwidth.

Mike "Silby" Silbersack