[96648] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Interesting new dns failures

daemon@ATHENA.MIT.EDU (Fergie)
Mon May 21 01:12:20 2007

From: "Fergie" <fergdawg@netzero.net>
Date: Mon, 21 May 2007 05:09:41 GMT
To: marquis@roble.com
Cc: nanog@merit.edu
Errors-To: owner-nanog@merit.edu


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -- Roger Marquis <marquis@roble.com> wrote:

>An odd pattern of DNS failures began appearing in the logs yesterday:
>
>May 20 15:05:19 PDT named[345]: wrong ans. name (uzmores.com !=3D
>ns5.uzmores.com)  =

>

Perhaps some fast-flux sticky cruft leftover from abuse?

I just looked at the first one on the list [above], and it's
certainly tell-tale:


http://cert.uni-stuttgart.de/stats/dns-replication.php?query=3Dns5.uzmor=
es.co
m&submit=3DQuery

- - ferg


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.1 (Build 1012)

wj8DBQFGUSmOq1pz9mNUZTMRAjwHAKCotvseQNDwuJ8FScudOW3/lRUzVgCg23ec
PtpYE7OtI5J8qRTpvxg0Vp8=3D
=3DVl8r
-----END PGP SIGNATURE-----

--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


home help back first fref pref prev next nref lref last post