Re: Problems with NS*.worldnic.com

["aljuhani" <info () riyadmail com>]

----- Original Message ----- 
From: "Randy Bush" <randy () psg com>
To: "Christopher L. Morrow" <christopher.morrow () mci com>
Cc: <nanog () merit edu>
Sent: Tuesday, April 26, 2005 16:35
Subject: Re: Problems with NS*.worldnic.com


> lots of folk sent email to me and not the list.  most report
> worldnic responding with tcp 53 and not udp.  would love to
> hear confirmation on list.  can think of a number of causes,
> one possible, but just a stab in the dark, would be an
> intentional hack as a defense to a spoofed-ip attack.

That is a bind issue when receiving empty response from
worldnic ns on udp queries, it asks again on tcp which
is very slow.

more here:
http://isc.sans.org/diary.php?date=2005-04-22

> what are some names known to be hosted on worldnic?
>
> randy

aljuhani