[169241] in North American Network Operators' Group
Re: random dns queries with random sources
daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Wed Feb 19 11:29:39 2014
From: "Dobbins, Roland" <rdobbins@arbor.net>
To: North American Networking and Offtopic Gripes List <nanog@nanog.org>
Date: Wed, 19 Feb 2014 16:28:17 +0000
In-Reply-To: <2AF841AB78217140A2A394B2BB6D39C5037B41EE@IDCPRDMBX2.ads.integratelecom.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Feb 19, 2014, at 10:57 PM, Beeman, Davis <Davis.Beeman@integratelecom.co=
m> wrote:
> I am late to this train, but it appears no one else has brought this up. =
It is a DNS tunneling setup, not an attack.=20
This makes a lot of sense - good insight, will look into this further!
-----------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>
Luck is the residue of opportunity and design.
-- John Milton
