On 2020-04-13 15:00, Steven Champeon via mailop wrote:
on Mon, Apr 13, 2020 at 11:54:17AM -0700, Brandon Long wrote:
Are you sure this isn't just the Google Public DNS servers?
Why would a DNS server be querying our mirrors?
it's kinda the obvious use-case innit?
I can guarantee that Gmail/Google doesn't do external rbl queries for live
traffic[1]. There might be some dashboard around that someone uses to see
if any of our addresses are on various rbls, though I haven't seen those
used in a long time and I don't see that hostname at all in our configs.
Doesn't rule out someone having their own script, I guess.
That's kind of what I figure, but it's still epically stupid to do
reverse octet style queries against a server that is customized to
handle a completely different style of lookup. None of them will ever
return a useful result, period, because that's not what those zones
are for. I'd really like it if they would knock it off.
This sounds very much like seriously clueless lusers using google public
DNS servers. "ooh blacklist, shiny!".
Firewall it.
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
