In message <f45e198a0906160333i6bc560cdke1cbc29175cd7...@mail.gmail.com>, Peter
 Andreev writes:
> Kevin, this server is totally non-recursive. Neither recurse option is
> enabled and packet size does not exceed 512 byte. May be it was some
> temporarly bugs due to mysterious causes.

        I suspect someone has modified the server to mitigate it
        being used in a amplification attack.  By returning TC you
        force TCP and all real iterative resolvers should handle
        that.  Spoofed sources won't see the reply.

        Mark
 
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: ma...@isc.org
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to