[dns-operations] BIND behaviour when using multiple active ZSK's

2014-04-08 Thread Thomas Dupas
over and over again for several minutes, and than it suddenly stops for that RRset. A bit later you might however see the same behaviour for another RRset Br, Thomas Dupas EURid vzw. http://www.EURid.eu The European Registry of Internet Domain Names Disclaimer: This email and

Re: [dns-operations] Restrict ANY query to TCP ? Re: Why would an MTA issue an ANY query instead of an MX query?

2012-06-11 Thread Thomas Dupas
Well, partly from what I see. Posts from yesterday already mentioned that many sources are not spoofed for the actual query the nameserver sees. If I look at our logs I see that most of the any queries come from north-america, not china. They use spoofed source ip's to reach the cpe, but the cpe

Re: [dns-operations] DNSSEC Signatures failed in Top-Level Domain fr.

2020-05-04 Thread Thomas Dupas via dns-operations
--- Begin Message --- I'll leave it to Vincent/Afnic to answer on this more extensively once there is more clarity, but we noticed it as well ~3 hours ago for dnsbelgium.fr . Mail + text message has been sent to Vincent and his colleagues at the time, they were looking into it. I've just been in

Re: [dns-operations] DNSSEC Signatures failed in Top-Level Domain fr.

2020-05-04 Thread Thomas Dupas via dns-operations
--- Begin Message --- I'll leave it to Vincent/Afnic to answer on this more extensively once there is more clarity, but we noticed it as well a few hours ago for dnsbelgium.fr . Mail + text message has been sent to Vincent and his colleagues at the time, they were looking into it. I've been in co

[dns-operations] Google traffic pattern

2024-06-10 Thread Thomas Dupas via dns-operations
--- Begin Message --- Hi, Is there anyone from Google, apart from probing Warren, on this list available for some inquiries in private? There are some strange patterns we’re seeing past few days towards. Br, Thomas -- Thomas Dupas www.dnsbelgium.be<http://www.dnsbelgium

Re: [dns-operations] cctld enumeration attack

2024-06-13 Thread Thomas Dupas via dns-operations
--- Begin Message --- Hi Randy, We saw a strange pattern a few days ago, which we initially thought came from Google resolvers, coming from GCE. A few 10K qps per NS instance. Block lasting ~12 hours, seemingly .com registrations attempted towards our cctld. Br, Thomas From: dns-operations o