From owner-freebsd-questions Tue Jun 6 12:12:47 2000 Delivered-To: freebsd-questions@freebsd.org Received: from alpha.root-servers.ch (alpha.root-servers.ch [195.49.62.125]) by hub.freebsd.org (Postfix) with SMTP id 7E46E37B906 for ; Tue, 6 Jun 2000 12:12:39 -0700 (PDT) (envelope-from gabriel_ambuehl@buz.ch) Received: (qmail 25589 invoked from network); 6 Jun 2000 19:14:20 -0000 Received: from client99-59.hispeed.ch (62.2.99.59) by ns1.root-servers.ch with SMTP; 6 Jun 2000 19:14:20 -0000 Date: Tue, 6 Jun 2000 21:14:11 +0200 From: Gabriel Ambuehl X-Mailer: The Bat! (1.42) Business Organization: BUZ Internet Services X-Priority: 3 (Normal) Message-ID: <120467867487.20000606211411@buz.ch> To: "first name" Cc: questions@freebsd.org Subject: Re: DNS DOS attack? Probably not.... In-reply-To: <20000606190749.7705.qmail@hotmail.com> References: <20000606190749.7705.qmail@hotmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > There is a core group that does this every night. And an equal number of > people send the repeated DNS requests off and on. Most are forward lookups, > but about 25% are reverse lookups. Well the reverse lookups could be from people running logresolve or similar utility that tries to convert the IPs found in a logfile into hostnames but the others? Best regards, Gabriel To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message