[80136] in North American Network Operators' Group
Re: Problems with NS*.worldnic.com
daemon@ATHENA.MIT.EDU (aljuhani)
Tue Apr 26 12:32:03 2005
From: "aljuhani" <info@riyadmail.com>
To: <nanog@nanog.org>
Date: Tue, 26 Apr 2005 19:30:58 +0300
Errors-To: owner-nanog@merit.edu
----- Original Message -----
From: "Randy Bush" <randy@psg.com>
To: "Christopher L. Morrow" <christopher.morrow@mci.com>
Cc: <nanog@merit.edu>
Sent: Tuesday, April 26, 2005 16:35
Subject: Re: Problems with NS*.worldnic.com
>
> lots of folk sent email to me and not the list. most report
> worldnic responding with tcp 53 and not udp. would love to
> hear confirmation on list. can think of a number of causes,
> one possible, but just a stab in the dark, would be an
> intentional hack as a defense to a spoofed-ip attack.
That is a bind issue when receiving empty response from
worldnic ns on udp queries, it asks again on tcp which
is very slow.
more here:
http://isc.sans.org/diary.php?date=2005-04-22
> what are some names known to be hosted on worldnic?
>
> randy
>
aljuhani