Heyo!

Any others who are being affected?

It looks like our customers Netgear routers (known ones: WNR3500Lv2, WNDR4500) 
are asking our DNS Server for the A record of: time-g.netgear.com or time-
a.netgear.com

Instead of an A record reply, they get a CNAME as answer with additional 
information the A record of that CNAME. That is what netgear has published on 
their DNS Servers.

Those routers are not happy with that reply and just start sending several 
hundred requests per second for A time-g.netgear.com resulting in considerable 
load and traffic on our DNS caches. Some customers have already transfered 
35GB of DNS traffic, only since today midnight.

I have contacted netgear technical support. The issue is yet unknown to them. 
They got my pcap files to analyze :-)

Any others observing that behaviour of netgear products? Any know remedies?

Mit freundlichen Grüssen

Benoit Panizzon
-- 
I m p r o W a r e   A G    -    
______________________________________________________

Zurlindenstrasse 29             Tel  +41 61 826 93 07
CH-4133 Pratteln                Fax  +41 61 826 93 02
Schweiz                         Web  http://www.imp.ch
______________________________________________________


_______________________________________________
swinog mailing list
[email protected]
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Antwort per Email an