[52640] in North American Network Operators' Group
RE: what's that smell?
daemon@ATHENA.MIT.EDU (Jason Lixfeld)
Mon Oct 7 19:06:30 2002
From: "Jason Lixfeld" <jlixfeld@andromedas.com>
To: "'Stephen J. Wilcox'" <steve@telecomplete.co.uk>,
"'Paul Vixie'" <paul@vix.com>
Cc: <nanog@merit.edu>
Date: Mon, 7 Oct 2002 19:05:21 -0400
In-Reply-To: <Pine.LNX.4.21.0210080004440.17989-100000@MrServer>
Errors-To: owner-nanog-outgoing@merit.edu
And to that end, I wonder how many of the bad queries are coming from MS
DNS servers.
> -----Original Message-----
> From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On
> Behalf Of Stephen J. Wilcox
> Sent: Monday, October 07, 2002 7:05 PM
> To: Paul Vixie
> Cc: nanog@merit.edu
> Subject: Re: what's that smell?
>
>
>
> to that end why doesnt bind ship with default zone files for
> rfc1918 space as
> well as 127.0.0.0 ?
>
> Steve
>
>
> On Mon, 7 Oct 2002, Paul Vixie wrote:
>
> >
> > since the last time we cleared the firewall statistics on
> c.root-servers.net,
> > 1895GB of udp/53 input has led to 6687GB of udp/53 output,
> but, and this is
> > the important part now so pay attention, 185GB of input was
> dropped due to an
> > RFC1918 source address.
> >
> > who needs DDOS when most network operators aren't filtering
> RFC1918 on output?
> > (there's only been 4.2GB of udp/2002 and other wormy
> traffic, by comparison.)
> >
> > current winners of the "sustained input traffic over
> 100KBits/sec" award are
> > 164.58.150.146, 200.52.12.131, and 195.146.194.12. c-root
> keeps on ignoring
> > you, but you just never give up. congradulations, or something.
> >
> > (note that c-root's network operator has offered to filter
> RFC1918 on
> > input from other AS's, but it's actually useful to keep on
> measuring it.)
> >
>
