nanog mailing list archives

Re: Interesting new dns failures


From: "Fergie" <fergdawg () netzero net>
Date: Mon, 21 May 2007 05:09:41 GMT


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -- Roger Marquis <marquis () roble com> wrote:

An odd pattern of DNS failures began appearing in the logs yesterday:

May 20 15:05:19 PDT named[345]: wrong ans. name (uzmores.com !=
ns5.uzmores.com)  


Perhaps some fast-flux sticky cruft leftover from abuse?

I just looked at the first one on the list [above], and it's
certainly tell-tale:


http://cert.uni-stuttgart.de/stats/dns-replication.php?query=ns5.uzmores.co
m&submit=Query

- - ferg


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.1 (Build 1012)

wj8DBQFGUSmOq1pz9mNUZTMRAjwHAKCotvseQNDwuJ8FScudOW3/lRUzVgCg23ec
PtpYE7OtI5J8qRTpvxg0Vp8=
=Vl8r
-----END PGP SIGNATURE-----

--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


Current thread: