Suspecious DNS traffic

2013-03-24 Thread babu dheen
Dear, We have Caching DNS server and certain PTR record(reverse entry verification purpose) only is allowed from internet. But I am observing suspicious DNS traffic from my BIND caching DNS server towards 67.215.80.15,67.215.80.13,207.192.69.4,67.227.239.85 IP address  on destination port 1033

Re: Suspecious DNS traffic

2013-03-24 Thread Mark Andrews
In message <1364140396.42023.yahoomail...@web190806.mail.sg3.yahoo.com>, babu d heen writes: > > Dear, > > We have Caching DNS server and certain PTR record(reverse entry > verification purpose) only is allowed from internet. But I am observing > suspicious DNS traffic from my BIND caching DNS

querying TLD nameservers - limitations

2013-03-24 Thread blrmaani
I am developing a monitoring script for internal use and this requires extensive querying of TLD nameservers (a .. m).tld servers. Questions: 1. Are there any rate limitations imposed by TLD servers i.e these servers allows only certain number of DNS queries per IP per second? 2. Are there othe

Re: querying TLD nameservers - limitations

2013-03-24 Thread Liu Mingxing
According to my experience, less restriction is imposed by TLD operator because TLD servers have sufficient ability and it is not secure for their service to limit, especially when too much limitations are added. Liu Mingxing From: blrmaani Date: 2013-03-25 07:55 To: comp-protocols-dns-bind

Re: How to flush MX records from the cache

2013-03-24 Thread blrmaani
On Wednesday, February 27, 2013 8:41:08 PM UTC-8, Abdul Khader wrote: > Dear All, > Is there a way to flush MX records from the cache of a caching DNS server ? > > Thanks > Abdul Khader Also, just try 'rndc' on command prompty - it shows various rndc options for flush subcommand. ___

Re: querying TLD nameservers - limitations

2013-03-24 Thread blrmaani
hmm.. I see delay in response to some of my queries.. wondering if its our network? On Sunday, March 24, 2013 5:02:57 PM UTC-7, Liu Mingxing wrote: > According to my experience, less restriction is imposed by TLD operator > because TLD servers have sufficient ability and it is not secure for the

Re: not all name servers advertise right edns0 size limit?

2013-03-24 Thread Mark Andrews
In message <2013032507232012562...@gmail.com>, "Liu Mingxing" writes: > Dear, > > dig some domain to some resolvers and name servers before find that they > do not advertise right reply size limit, even though in fact they support > of sufficient size. > when the resolver 114.114.114.114 is que

Re: querying TLD nameservers - limitations

2013-03-24 Thread Vernon Schryver
> From: blrmaani > I am developing a monitoring script for internal use and this requires > extensive querying of TLD nameservers (a .. m).tld servers. > > Questions: > 1. Are there any rate limitations imposed by TLD servers i.e these > servers allows only certain number of DNS queries per IP pe

Setting a timeout for forwarders

2013-03-24 Thread Stephen Wood
I have bind set up to forward only. Is it possible to declare a timeout for recursive queries? I can't seem to find a setting I'm trying to protect against slow or unresponsive DNS that are declared as a forwarder in the named.conf.options settings. ___