nanog mailing list archives
Re: Problems with NS*.worldnic.com
From: "Christopher L. Morrow" <christopher.morrow () mci com>
Date: Tue, 26 Apr 2005 13:58:29 +0000 (GMT)
On Tue, 26 Apr 2005, Randy Bush wrote:
lots of folk sent email to me and not the list. most report worldnic responding with tcp 53 and not udp. would love to hear confirmation on list. can think of a number of causes, one possible, but just a stab in the dark, would be an intentional hack as a defense to a spoofed-ip attack. what are some names known to be hosted on worldnic?
we had problems reported with: www.calairmail.com www.holidaycardwebsite.com I did some poking around lastnight with dig and some local unix hosts that I hadn't tried this before on and got no change to tcp :( (so no truncate and returned results via UDP) though today I see: morrowc@iad1-srv02:~$ dig www.holidaycardwebsite.com. @ns7.worldnic.com ;; Truncated, retrying in TCP mode. and failures (which is PROBABLY my silly iptables config...) morrowc@iad1-srv02:~$ dig www.holidaycardwebsite.com. @ns8.worldnic.com ; <<>> DiG 9.2.2rc1 <<>> www.holidaycardwebsite.com. @ns8.worldnic.com ;; global options: printcmd interesting that both servers aren't doing the same thing?
Current thread:
- Re: The "not long discussion" thread...., (continued)
- Re: The "not long discussion" thread.... Steve Sobol (Apr 26)
- Re: The "not long discussion" thread.... Christopher L. Morrow (Apr 26)
- Re: The "not long discussion" thread.... Jerry Pasker (Apr 27)
- Re: The "not long discussion" thread.... Christopher L. Morrow (Apr 27)
- RE: Problems with NS*.worldnic.com Christopher L. Morrow (Apr 25)
- Re: Problems with NS*.worldnic.com Simon Waters (Apr 26)
- Re: Problems with NS*.worldnic.com Christopher L. Morrow (Apr 26)
- Re: Problems with NS*.worldnic.com Randy Bush (Apr 26)
- Re: Problems with NS*.worldnic.com Peter Corlett (Apr 26)
- Re: Problems with NS*.worldnic.com Christopher L. Morrow (Apr 26)
- Re: Problems with NS*.worldnic.com Steven M. Bellovin (Apr 26)
- Re: Problems with NS*.worldnic.com aljuhani (Apr 26)