[nsp-sec] NetSol / WorldNIC nameservers continue to be down

[Bill Woodcock]

A bit more detail on this.

Note that NetSol hasn't been able to get any of their folks approved  
to be on NSP-Sec yet, to the best of my knowledge, but they'd like to.

NetSol servers are receiving valid UDP/53 queries for extremely long  
domain names which do not exist.  The attack is taxing the CPUs of  
their servers rather than their network bandwidth.  They've trying to  
finish up writing code to distinguish this type of query from ordinary  
nxdomain.

I've asked them to begin compiling a frequency-distribution of source  
IPs as soon as that's done.

                                 -Bill




-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 194 bytes
Desc: This is a digitally signed message part
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20090123/7db50c19/attachment-0001.sig>