[175657] in North American Network Operators' Group
RBL alert: impending sh*tshow for rbl.orbitrbl.com
daemon@ATHENA.MIT.EDU (Mark E. Jeftovic)
Mon Oct 27 13:55:45 2014
X-Original-To: nanog@nanog.org
Date: Mon, 27 Oct 2014 13:53:10 -0400
From: "Mark E. Jeftovic" <markjr@easydns.com>
To: Nanog <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
As some of you may know, we recently took over ZoneEdit.com and it's
customer base.
We've found a domain on the system: rbl.orbitrbl.com which is delegated
to zoneedit nameservers, broken (it is not allowed to zone transfer from
it's designated master), unresponsive (account owner is not answering
email, has an address in Sri Lanka and no telephone number), is using
excessive queries (~ >500M queries per day on a "free dns" domain) and
attracting repeated, multiple DDoS attacks.
As such, we will be wildcarding this zone and setting a long TTL fairly
soon.
If you're actually using this RBL in your MTAs, now's a good time to
stop. (this RBL is broken on 5 out of it's 6 delegated nameservers
across 3 separate providers).
- mark
--
Mark E. Jeftovic <markjr@easydns.com>
Founder & CEO, easyDNS Technologies Inc.
+1-(416)-535-8672 ext 225
Read my blog: http://markable.com
