[80136] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Problems with NS*.worldnic.com

daemon@ATHENA.MIT.EDU (aljuhani)
Tue Apr 26 12:32:03 2005

From: "aljuhani" <info@riyadmail.com>
To: <nanog@nanog.org>
Date: Tue, 26 Apr 2005 19:30:58 +0300
Errors-To: owner-nanog@merit.edu


----- Original Message ----- 
From: "Randy Bush" <randy@psg.com>
To: "Christopher L. Morrow" <christopher.morrow@mci.com>
Cc: <nanog@merit.edu>
Sent: Tuesday, April 26, 2005 16:35
Subject: Re: Problems with NS*.worldnic.com


> 
> lots of folk sent email to me and not the list.  most report
> worldnic responding with tcp 53 and not udp.  would love to
> hear confirmation on list.  can think of a number of causes,
> one possible, but just a stab in the dark, would be an
> intentional hack as a defense to a spoofed-ip attack.

That is a bind issue when receiving empty response from
worldnic ns on udp queries, it asks again on tcp which
is very slow.

more here:
http://isc.sans.org/diary.php?date=2005-04-22

> what are some names known to be hosted on worldnic?
> 
> randy
> 

aljuhani 

home help back first fref pref prev next nref lref last post