[187838] in North American Network Operators' Group
Re: Thank you, Comcast.
daemon@ATHENA.MIT.EDU (John Kristoff)
Fri Feb 26 14:04:58 2016
X-Original-To: nanog@nanog.org
Date: Fri, 26 Feb 2016 13:02:22 -0600
From: John Kristoff <jtk@cymru.com>
To: nanog@nanog.org
In-Reply-To: <alpine.DEB.2.02.1602260718460.11524@uplift.swm.pp.se>
Errors-To: nanog-bounces@nanog.org
On Fri, 26 Feb 2016 07:20:28 +0100 (CET)
Mikael Abrahamsson <swmike@swm.pp.se> wrote:
> I know historically there were resolvers that used UDP/53 as source
> port for queries, but is this the case nowadays?
Empirically from what I've observed, much less than there once was.
Looking at a sample of a few thousand queries on a server set I can
see, I don't need much more than what two hands can count.
I still see the occasional ISP name server, probably having been around
forever and perhaps locked in with the query-source option in BIND.
You also see what is probably as a result of some local oddball policy,
making something easier, such as the queries *.labs.rapid7.com (hi guys)
like to issue for things like VERSION.BIND CH TXT.
John
