<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
It's no easy to block my clients and ask them to clean up their machines.</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
They will switch to another service instead of cleaning.</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="signature"><br>
<div class="ecxmoz-signature">-- <br>
<br>
<font color="#3366ff"><font color="#000000">Respectfully<b><br>
</b><b>Mahdi A. Mahdi</b></font></font><font color="#3366ff"><br>
<br>
</font><font color="#3366ff"></font></div>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Rainer Duffner <rainer@ultra-secure.de><br>
<b>Sent:</b> Monday, April 9, 2018 9:12 PM<br>
<b>To:</b> Mahdi Adnan<br>
<b>Cc:</b> unbound-users@unbound.net<br>
<b>Subject:</b> Re: DGA Attack mitigation</font>
<div> </div>
</div>
<div class="" style="word-wrap:break-word; line-break:after-white-space"><br class="">
<div><br class="">
<blockquote type="cite" class="">
<div class="">Am 09.04.2018 um 20:04 schrieb Mahdi Adnan via Unbound-users <<a href="mailto:unbound-users@unbound.net" class="">unbound-users@unbound.net</a>>:</div>
<br class="x_Apple-interchange-newline">
<div class=""><span class="" style="font-family:Calibri,Helvetica,sans-serif; font-size:16px; font-style:normal; font-weight:normal; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; background-color:rgb(255,255,255); text-decoration:none; float:none; display:inline!important">Im
running 20 Unbound servers and around 20% of response are NXDOMAIN, for queries coming from my clients.</span></div>
</blockquote>
</div>
<br class="">
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">Block those IPs that are obviously p4wned until they clean up their PCs?</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
</div>
</body>
</html>