Hello, Thanks for your help. I did a research after asking the question, and came to the same conclusion. But it didn't occur to me that it could be a firewall, I thought it was the name server doing it, maybe blacklisting the domains beginning with "isc". Does the fact that the query times out show it is a firewall? If it was the dns server, would it reject the query?
My problem is, I host a domain beginning with "isc", and it cannot get mail from many domains. If it wasj just "someone", I wouldn't mind, but there are many domains which cannot get through. The problem appeared rather recently, so I suspect that an update in a firewall brand, or a dns server update is causing this. Thanks for your help. On Thu, May 15, 2014 at 2:16 AM, Mark Andrews <ma...@isc.org> wrote: > > Someone trying to block isc.org/any queries in a firewall to prevent > their servers being used in a amplification attack and causing > collateral damage through a badly designed rule. > > Mark > > In message > <caplzrxrary1otfbfmfl7svny-aic7hxpw9c3xru11u4oyhz...@mail.gmail.com>, Yossi > Eskenazi writes: >> >> Hello, >> >> My question is not directly related to bind, but since it's related to isc >> I decided to ask here. >> >> Some name servers I perform a lookup does not respond to queries, if they >> begin with "isc" >> >> Example server : 213.143.254.38 >> Query for any domain, it responds. Sometimes it times out, but ask again , >> it eventually responds. >> Query for "isc.com" "isc.org" "isc.whatever.it.is" or just "isc", it times >> out. >> >> Example server: 185.15.40.80 >> Query for any domain, it says "query refused" >> Query for "isc.com" "isc.org" "isc.whatever.it.is" or just "isc", it times >> out. >> >> It's not just these two, there are other name servers behaving this way. >> >> What can be the reason for this? >> >> Thanks for your help >> >> Y.E. >> > -- > Mark Andrews, ISC > 1 Seymour St., Dundas Valley, NSW 2117, Australia > PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
