nanog mailing list archives

RE: what's that smell?


From: "Jason Lixfeld" <jlixfeld () andromedas com>
Date: Mon, 7 Oct 2002 19:05:21 -0400


And to that end, I wonder how many of the bad queries are coming from MS
DNS servers.

-----Original Message-----
From: owner-nanog () merit edu [mailto:owner-nanog () merit edu] On 
Behalf Of Stephen J. Wilcox
Sent: Monday, October 07, 2002 7:05 PM
To: Paul Vixie
Cc: nanog () merit edu
Subject: Re: what's that smell?



to that end why doesnt bind ship with default zone files for 
rfc1918 space as
well as 127.0.0.0 ?

Steve


On Mon, 7 Oct 2002, Paul Vixie wrote:


since the last time we cleared the firewall statistics on 
c.root-servers.net,
1895GB of udp/53 input has led to 6687GB of udp/53 output, 
but, and this is
the important part now so pay attention, 185GB of input was 
dropped due to an
RFC1918 source address.

who needs DDOS when most network operators aren't filtering 
RFC1918 on output?
(there's only been 4.2GB of udp/2002 and other wormy 
traffic, by comparison.)

current winners of the "sustained input traffic over 
100KBits/sec" award are
164.58.150.146, 200.52.12.131, and 195.146.194.12.  c-root 
keeps on ignoring
you, but you just never give up.  congradulations, or something.

(note that c-root's network operator has offered to filter 
RFC1918 on
input from other AS's, but it's actually useful to keep on 
measuring it.)




Current thread: