OT: lots of IPv6 DNS requests

Jon Radel jon at radel.com
Wed Jun 11 13:15:35 UTC 2008


Ted Mittelstaedt wrote:
> 
> 
>> -----Original Message-----
>> From: owner-freebsd-questions at freebsd.org
>> [mailto:owner-freebsd-questions at freebsd.org]On Behalf Of Jon Radel
>> Sent: Tuesday, June 10, 2008 4:02 PM
>> To: Wojciech Puchar
>> Cc: freebsd-questions at freebsd.org
>> Subject: Re: OT: lots of IPv6 DNS requests
>>
> 
>> Nameservers are hitting an address of yours.  Therefore something is 
>> probably handing out your address.  Somebody (that would be me) has 
>> looked up the address in question and even looked up the nameserver 
>> which is handing out that address in a glue record. 
> 
> A simple problem EASILY solved.
> 
> Why bother the owner of the misconfigured nameserver?
> 
> Instead, simply insert a wildcard record to your namesever
> that hands out the IP number of the nastiest porno site you
> can find to any DNS query.
> 
> After a few days the owners of the misconfigured nameservers
> or clients will go hunting for whatever is poisoning their cache.
> 
> Problem solved.
> 
> Ted

Silly me, I've always believed that people setup nameservers because 
they want their resources to be found.  Having one the parents of your 
zone point to a random machine of yours, which you then use to serve 
crap records, strikes me as somewhat counterproductive.  And I really 
fail to see why whomever runs the parent zone would even notice.  So I 
rather suspect that the log messages which so traumatize Wojciech would 
continue.

Problem not solved.

--Jon Radel
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3283 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20080611/01cea79e/smime.bin


More information about the freebsd-questions mailing list