[nsp-sec] NetSol / WorldNIC nameservers continue to be down

Joe Abley jabley at hopcount.ca
Sun Jan 25 02:25:10 EST 2009


On 23 Jan 2009, at 16:32, Bill Woodcock wrote:

> NetSol servers are receiving valid UDP/53 queries for extremely long  
> domain names which do not exist.  The attack is taxing the CPUs of  
> their servers rather than their network bandwidth.  They've trying  
> to finish up writing code to distinguish this type of query from  
> ordinary nxdomain.

All servers, or some servers? J-root servers, A-root servers, GTLD  
severs, or some or all of the above? Reflection attack, or a straight  
client attack? Details would aid investigation.


Joe




More information about the nsp-security mailing list