Search Again:

Re: Strange Requests

From: Chris Buxton
Date: Saturday, January 29, 2000
Time: 8:47:00 am

At 5:33 PM -0600 1/28/00, Steve Dannaway wrote:
>Hello,
>
>MY DNS crashed for the first time in six months this afternoon -- quite
>distressing since I'm snowed in 10 miles from my office! When I checked in
>on it, I noticed something strange.
>
>I'm getting quite literally a TON of "lame delegations" in my log from all
>over the place. Since, I'm quite a newbie in this arena, my question is
>what is going on here? Am I jumping to conclusions, or is this some from of
>DOS attack? If so, what can I do to stop it -- the only software on this is
>DoorStop and QuickDNS and I have no access to the router (since we are
>snowed in and the network crew is unavailable!)

It would be useful to see a debug-level log of this activity.

Definition of "lame delegation": (1) A domain is delegated (from the parent domain) to a server which, when queried for information about the domain, gives a non-authoritative answer. (2) A domain's data contains an NS record which points to a server which, when queried for information about the domain, gives a non-authoritative answer.

So there are some questions that need answering:

1) Whence came the recursive queries that caused QuickDNS to find lame delegations?

2) What data was requested?

3) Is the delegation actually lame, or is there some problem with QuickDNS or with the network connection?
____________________________________________________________________
Chris Buxton cbuxton@menandmice.com
Men & Mice http://www.menandmice.com
Makers of: QuickDNS Pro



Messages In This Thread:



Return to Digital Point Solutions' Home Page