[156147] in North American Network Operators' Group
Re: time-b.netgear.com/time-c.netgear.com dns queries
daemon@ATHENA.MIT.EDU (Ryan Rawdon)
Fri Sep 7 20:47:16 2012
From: Ryan Rawdon <ryan@u13.net>
In-Reply-To: <CAGdg5QCHSBzgxa7H_qoNW6iguRxR4vhBR-CsCymrFMnjhvs77w@mail.gmail.com>
Date: Fri, 7 Sep 2012 19:46:44 -0500
To: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Sep 7, 2012, at 7:44 PM, Basil Baby wrote:
> Hmm... Even though similar issue was identified in 2003, looks like =
still
> there are devices in market with those old firmwares or similar
> behavior. sheesh !! :(
>=20
> -Basil
While NETGEAR does have a history of issues like this, the UofW issue is =
likely not related to what you are seeing - that issue stemmed from them =
not using DNS and hardcoding the university's NTP server. =20
The issue you are seeing seems to stem from their NTP code doing the =
Wrong Thing nonetheless...
>=20
>=20
> On Fri, Sep 7, 2012 at 8:30 PM, Gary E. Miller <gem@rellim.com> wrote:
>=20
>> Yo Basil!
>>=20
>> On Fri, 7 Sep 2012 20:22:29 -0400
>> Basil Baby <basilbaby@gmail.com> wrote:
>>=20
>>> Noticed lot of "A" record queries for
>>> time-b.netgear.com/time-c.netgear.comon dns servers.
>>> Has anyone noticed similar behavior on any of your dns servers? =
Anyone
>>> aware about a known issue with netgear home routers which can create
>>> bulk dns queries?
>>=20
>>=20
>> =
https://en.wikipedia.org/wiki/NTP_server_misuse_and_abuse#NETGEAR_and_the_=
University_of_Wisconsin.E2.80.93Madison
>>=20
>>=20
>> RGDS
>> GARY
>> =
--------------------------------------------------------------------------=
-
>> Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97701
>> gem@rellim.com Tel:+1(541)382-8588
>>=20
