nanog mailing list archives
Re: What are these Google IPs hammering on my DNS server?
From: "John R. Levine" <johnl () iecc com>
Date: 3 Dec 2023 18:58:53 -0500
Just set TC=1 for those clients. If you get queries over TCP then they where not spoofed. If they are using DNS COOKIE (RFC 7873) you can send back BADCOOKIE to the initial (client cookie only) UDP request with your server cookie. Identifying real DNS clients has been possible for years now. It’s not hard.
I could do that but with the other clues I think it's unlikely they're spoofed and far more likely they're real traffic from clueless users.
Regards, John Levine, johnl () taugh com, Primary Perpetrator of "The Internet for Dummies", Please consider the environment before reading this e-mail. https://jl.ly
Current thread:
- What are these Google IPs hammering on my DNS server? John Levine (Dec 03)
- Re: What are these Google IPs hammering on my DNS server? Mike Hammett (Dec 03)
- Re: What are these Google IPs hammering on my DNS server? Tom Samplonius (Dec 03)
- Re: What are these Google IPs hammering on my DNS server? John R. Levine (Dec 03)
- Re: What are these Google IPs hammering on my DNS server? Peter Potvin via NANOG (Dec 03)
- Re: What are these Google IPs hammering on my DNS server? John R. Levine (Dec 03)
- RE: What are these Google IPs hammering on my DNS server? Michael Hare via NANOG (Dec 03)
- RE: What are these Google IPs hammering on my DNS server? John R. Levine (Dec 03)
- Re: What are these Google IPs hammering on my DNS server? Mark Andrews (Dec 03)
- Re: What are these Google IPs hammering on my DNS server? John R. Levine (Dec 03)
- Re: What are these Google IPs hammering on my DNS server? Damian Menscher via NANOG (Dec 04)
- Re: What are these Google IPs hammering on my DNS server? John R. Levine (Dec 04)
- RE: What are these Google IPs hammering on my DNS server? Michael Hare via NANOG (Dec 05)
- Re: What are these Google IPs hammering on my DNS server? Ray Bellis (Dec 05)
- Re: What are these Google IPs hammering on my DNS server? Christopher Morrow (Dec 05)
- Re: What are these Google IPs hammering on my DNS server? Ray Bellis (Dec 05)
- Re: What are these Google IPs hammering on my DNS server? John R. Levine (Dec 03)