nanog mailing list archives

RBL alert: impending sh*tshow for rbl.orbitrbl.com


From: "Mark E. Jeftovic" <markjr () easydns com>
Date: Mon, 27 Oct 2014 13:53:10 -0400


As some of you may know, we recently took over ZoneEdit.com and it's
customer base.

We've found a domain on the system: rbl.orbitrbl.com which is delegated
to zoneedit nameservers, broken (it is not allowed to zone transfer from
it's designated master), unresponsive (account owner is not answering
email, has an address in Sri Lanka and no telephone number), is using
excessive queries (~ >500M queries per day on a "free dns" domain) and
attracting repeated, multiple DDoS attacks.

As such, we will be wildcarding this zone and setting a long TTL fairly
soon.

If you're actually using this RBL in your MTAs, now's a good time to
stop. (this RBL is broken on 5 out of it's 6 delegated nameservers
across 3 separate providers).

- mark


-- 
Mark E. Jeftovic <markjr () easydns com>
Founder & CEO, easyDNS Technologies Inc.
+1-(416)-535-8672 ext 225
Read my blog: http://markable.com


Current thread: