Search Again: Re: QDNS being attacked? From: Mia''s Virtual Post Office Date: Wednesday, May 30, 2001 Time: 7:51:06 am Men & Mice Support said: >Set your logging level to "debug", capture a brief session (~ 1 >hour), then set it back to your normal setting. This will tell you >who is originating these queries. If it's someone on the outside, >they may be hijacking your server. > Ok, we set up an access list for the whole class of IP's that we are having problems with since whoever is doing this keeps dialing up and getting a new IP. Since setting up the access list we saw over 7000 attempts to query our DNS server in the first 20 minutes: Extended IP access list 112 deny udp 62.226.0.0 0.0.255.255 any (7194 matches) Why on earth would anyone do this? They appear to be querying every single reverse record on the internet one by one. jer (jer@mia.net) Bella Mia, Inc. High Speed Wireless - www.dslone.com Web Hosting and Colocation - www.hostdrive.com Nation Wide Dialup 4 years and running - www.mia.net NetZero = What this company will "NET" --- "ZERO"

Messages In This Thread: QDNS being attacked? by Mia''s Virtual Post Office on May 30, 2001 at 2:15:14 am Re: QDNS being attacked? by Men & Mice Support on May 30, 2001 at 2:40:02 am Re: QDNS being attacked? by Mia''s Virtual Post Office on May 30, 2001 at 4:23:30 am Re: QDNS being attacked? by Mia''s Virtual Post Office on May 30, 2001 at 7:51:06 am Re: QDNS being attacked? by Global Homes Webmaster on May 30, 2001 at 10:14:58 am Re: QDNS being attacked? by Trevi Media WebMaster on May 30, 2001 at 11:59:26 am Re: QDNS being attacked? by Men & Mice Support on May 30, 2001 at 10:38:57 pm Re: QDNS being attacked? by Men & Mice Support on May 30, 2001 at 10:42:10 pm