[Unbound-users] Unbound DDoS / reflexion attack counter-measure ?

Larry Havemann larry at edgecast.com
Fri May 30 23:04:40 UTC 2014 

If your server does not need to be open to the world, you could restrict
queries to the subnets you control by adding "access-control:
<subnet>/<mask> allow".

-Larry


On Fri, May 30, 2014 at 3:46 PM, Tom <tom at then.fr> wrote:

> Hey guys,
>
> Lately, we had a few botnets that slowed down our unbounds by querying
> $RANDOM.www.$website.$tokill (see dump_requestlist below for an
> example). They use all the available sockets (numfiles) and then
> unbound is very slow to resolve. I was wondering how can we mitigate
> these kind of attacks. I tried to play with jostle-timeout but I
> couldn't really see an improvement.
>
> My setup:
>
> server:
>         verbosity: 1
>         interface-automatic: yes
>         outgoing-range: 950
>         outgoing-num-tcp: 50
>         incoming-num-tcp: 50
>         so-rcvbuf: 4m
>         msg-cache-size: 50m
>         jostle-timeout: 1000
>         rrset-cache-size: 100m
>         root-hints: "named.cache"
>         hide-identity: yes
>         hide-version: yes
>         prefetch: yes
>         prefetch-key: yes
>         auto-trust-anchor-file: "root.key"
>
> python:
> remote-control:
>         control-enable: yes
>
> Version 1.4.16
> linked libs: libevent 1.4.13-stable (it uses epoll), ldns 1.6.16,
> OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 linked modules: validator iterator
> configured for i386-redhat-linux-gnu on Fri Feb  3 11:22:53 EST 2012
> with options: '--build=i386-koji-linux-gnu'
> '--host=i386-koji-linux-gnu' '--target=i386-redhat-linux-gnu'
> '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr'
> '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc'
> '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib'
> '--libexecdir=/usr/libexec' '--localstatedir=/var'
> '--sharedstatedir=/usr/com' '--mandir=/usr/share/man'
> '--infodir=/usr/share/info' '--with-ldns=' '--with-libevent'
> '--with-pthreads' '--with-ssl' '--disable-rpath' '--enable-debug'
> '--disable-static' '--with-conf-file=/etc/unbound/unbound.conf'
> '--with-pidfile=/var/run/unbound/unbound.pid' '--disable-gost'
> '--enable-sha2'
>
> # unbound-control dump_requestlistthread
> #    type cl name    seconds    module status
>    0    A IN ns2.myhostadmin.net. - iterator wait for 118.123.249.112
>    1    A IN n5w50.akamai.net. - iterator wait for 184.85.248.193
>    2 AAAA IN ns6-193.akamaitech.net. - iterator wait for 2.22.230.193
>    3    A IN ab.www.sidear.cn. 42.189186 iterator wants A IN
> ns2.myhostadmin.net.
>    4    A IN af.www.sidear.cn. 13.652754 iterator wants A IN
> ns2.myhostadmin.net.
>    5    A IN al.www.sidear.cn. 15.726925 iterator wants A IN
> ns2.myhostadmin.net.
>    6    A IN ap.www.sidear.cn. 35.822279 iterator wants A IN
> ns2.myhostadmin.net.
>    7    A IN cb.www.sidear.cn. 36.525941 iterator wants A IN
> ns2.myhostadmin.net.
>    8    A IN ch.www.sidear.cn. 28.784012 iterator wants A IN
> ns2.myhostadmin.net.
>    9    A IN ct.www.sidear.cn. 30.623194 iterator wants A IN
> ns2.myhostadmin.net.
>   10    A IN cx.www.sidear.cn. 42.648666 iterator wants A IN
> ns2.myhostadmin.net.
>   11    A IN gd.www.sidear.cn. 47.724493 iterator wants A IN
> ns2.myhostadmin.net.
>   12    A IN gh.www.sidear.cn. 39.788104 iterator wants A IN
> ns2.myhostadmin.net.
>   13    A IN id.www.sidear.cn. 35.823329 iterator wants A IN
> ns2.myhostadmin.net.
>   14    A IN iz.www.sidear.cn. 50.452290 iterator wants A IN
> ns2.myhostadmin.net.
>   15    A IN kd.www.sidear.cn. 42.652587 iterator wants A IN
> ns2.myhostadmin.net.
>   16    A IN kp.www.sidear.cn. 36.959272 iterator wants A IN
> ns2.myhostadmin.net.
>   17    A IN kx.www.sidear.cn. 36.594089 iterator wants A IN
> ns2.myhostadmin.net.
>   18    A IN kz.www.sidear.cn. 48.397588 iterator wants A IN
> ns2.myhostadmin.net.
>   19    A IN mb.www.sidear.cn. 24.006796 iterator wants A IN
> ns2.myhostadmin.net.
>   20    A IN mn.www.sidear.cn. 14.528836 iterator wants A IN
> ns2.myhostadmin.net.
>   21    A IN ql.www.sidear.cn. 6.824257 iterator wants A IN
> ns2.myhostadmin.net.
>   22    A IN qr.www.sidear.cn. 4.619793 iterator wants A IN
> ns2.myhostadmin.net.
>   23    A IN ur.www.sidear.cn. 31.598018 iterator wants A IN
> ns2.myhostadmin.net.
>   24    A IN wx.www.sidear.cn. 23.644625 iterator wants A IN
> ns2.myhostadmin.net.
>   25    A IN yf.www.sidear.cn. 22.313281 iterator wants A IN
> ns2.myhostadmin.net.
>   26    A IN yl.www.sidear.cn. 50.453409 iterator wants A IN
> ns2.myhostadmin.net.
>   27    A IN www.huffingtonpost.com. 0.002785 iterator wait for
> 204.74.109.1 28    A IN apch.www.sidear.cn. 36.480382 iterator wants A
> IN ns2.myhostadmin.net.
>   29    A IN atoh.www.sidear.cn. 51.597774 iterator wants A IN
> ns2.myhostadmin.net.
>   30    A IN azcn.www.sidear.cn. 7.601601 iterator wants A IN
> ns2.myhostadmin.net.
>   31    A IN ctex.www.sidear.cn. 48.464616 iterator wants A IN
> ns2.myhostadmin.net.
>   32    A IN grkv.www.sidear.cn. 24.789270 iterator wants A IN
> ns2.myhostadmin.net.
>   33    A IN ibgx.www.sidear.cn. 34.850291 iterator wants A IN
> ns2.myhostadmin.net.
>   34    A IN ixcn.www.sidear.cn. 7.752019 iterator wants A IN
> ns2.myhostadmin.net.
>   35    A IN kfwb.www.sidear.cn. 23.526017 iterator wants A IN
> ns2.myhostadmin.net.
>   36    A IN kvah.www.sidear.cn. 1.452977 iterator wants A IN
> ns2.myhostadmin.net.
>   37    A IN mbqf.www.sidear.cn. 34.851145 iterator wants A IN
> ns2.myhostadmin.net.
>   38    A IN mjcn.www.sidear.cn. 7.603391 iterator wants A IN
> ns2.myhostadmin.net.
>   39    A IN ofqr.www.sidear.cn. 39.115637 iterator wants A IN
> ns2.myhostadmin.net.
>   40    A IN qzen.www.sidear.cn. 40.258983 iterator wants A IN
> ns2.myhostadmin.net.
>   41    A IN svkd.www.sidear.cn. 4.457772 iterator wants A IN
> ns2.myhostadmin.net.
>   42    A IN utgn.www.sidear.cn. 4.453644 iterator wants A IN
> ns2.myhostadmin.net.
>   43    A IN wngt.www.sidear.cn. 7.761654 iterator wants A IN
> ns2.myhostadmin.net.
>   44    A IN wrur.www.sidear.cn. 36.476068 iterator wants A IN
> ns2.myhostadmin.net.
>   45    A IN wxwj.www.sidear.cn. 40.300454 iterator wants A IN
> ns2.myhostadmin.net.
>   46    A IN yjyl.www.sidear.cn. 1.453848 iterator wants A IN
> ns2.myhostadmin.net.
>   47    A IN arqhmt.www.sidear.cn. 17.369252 iterator wants A IN
> ns2.myhostadmin.net.
>   48    A IN ebmpwj.www.sidear.cn. 30.374737 iterator wants A IN
> ns2.myhostadmin.net.
>   49    A IN efqnwr.www.sidear.cn. 6.852859 iterator wants A IN
> ns2.myhostadmin.net.
>   50    A IN ejuhkl.www.sidear.cn. 38.135769 iterator wants A IN
> ns2.myhostadmin.net.
>   51    A IN elejgp.www.sidear.cn. 22.328630 iterator wants A IN
> ns2.myhostadmin.net.
>   52    A IN ensrgj.www.sidear.cn. 41.439056 iterator wants A IN
> ns2.myhostadmin.net.
>   53    A IN evofml.www.sidear.cn. 8.495929 iterator wants A IN
> ns2.myhostadmin.net.
>   54    A IN klcxup.www.sidear.cn. 47.810884 iterator wants A IN
> ns2.myhostadmin.net.
>   55    A IN knahsr.www.sidear.cn. 17.327300 iterator wants A IN
> ns2.myhostadmin.net.
>   56    A IN mfenyb.www.sidear.cn. 8.225055 iterator wants A IN
> ns2.myhostadmin.net.
>   57    A IN ohmjyb.www.sidear.cn. 6.496341 iterator wants A IN
> ns2.myhostadmin.net.
>   58    A IN ovifsx.www.sidear.cn. 2.577618 iterator wants A IN
> ns2.myhostadmin.net.
>   59    A IN qbsnet.www.sidear.cn. 14.002211 iterator wants A IN
> ns2.myhostadmin.net.
>   60    A IN qdebir.www.sidear.cn. 2.579080 iterator wants A IN
> ns2.myhostadmin.net.
>   61    A IN qjstov.www.sidear.cn. 6.004333 iterator wants A IN
> ns2.myhostadmin.net.
>   62    A IN qtczod.www.sidear.cn. 8.235214 iterator wants A IN
> ns2.myhostadmin.net.
>   63    A IN sfgtuj.www.sidear.cn. 8.491116 iterator wants A IN
> ns2.myhostadmin.net.
>   64    A IN shsnif.www.sidear.cn. 6.851626 iterator wants A IN
> ns2.myhostadmin.net.
>   65    A IN spizir.www.sidear.cn. 14.050631 iterator wants A IN
> ns2.myhostadmin.net.
>   66    A IN uhwzed.www.sidear.cn. 27.213915 iterator wants A IN
> ns2.myhostadmin.net.
>   67    A IN utajir.www.sidear.cn. 38.068550 iterator wants A IN
> ns2.myhostadmin.net.
>   68    A IN wfankt.www.sidear.cn. 30.301681 iterator wants A IN
> ns2.myhostadmin.net.
>   69    A IN wxsxwl.www.sidear.cn. 41.365671 iterator wants A IN
> ns2.myhostadmin.net.
>   70    A IN ahangded.www.sidear.cn. 29.609808 iterator wants A IN
> ns2.myhostadmin.net.
>   71    A IN ajilujyl.www.sidear.cn. 50.807512 iterator wants A IN
> ns2.myhostadmin.net.
>   72    A IN ajqzcrop.www.sidear.cn. 51.094238 iterator wants A IN
> ns2.myhostadmin.net.
>   73    A IN anszsfcv.www.sidear.cn. 50.455123 iterator wants A IN
> ns2.myhostadmin.net.
>   74    A IN aritqlyf.www.sidear.cn. 50.317049 iterator wants A IN
> ns2.myhostadmin.net.
>   75    A IN cfypwtmd.www.sidear.cn. 9.827067 iterator wants A IN
> ns2.myhostadmin.net.
>   76    A IN clatwtsb.www.sidear.cn. 42.653462 iterator wants A IN
> ns2.myhostadmin.net.
>   77    A IN gxovkjan.www.sidear.cn. 32.918413 iterator wants A IN
> ns2.myhostadmin.net.
>   78    A IN qbqpupwp.www.sidear.cn. 47.787873 iterator wants A IN
> ns2.myhostadmin.net.
>   79    A IN qvofqbwt.www.sidear.cn. 17.846959 iterator wants A IN
> ns2.myhostadmin.net.
>   80    A IN qxgxevcd.www.sidear.cn. 41.909531 iterator wants A IN
> ns2.myhostadmin.net.
>   81    A IN utclclep.www.sidear.cn. 51.050237 iterator wants A IN
> ns2.myhostadmin.net.
>   82    A IN uzetiper.www.sidear.cn. 39.971235 iterator wants A IN
> ns2.myhostadmin.net.
>   83    A IN wduxyzyz.www.sidear.cn. 7.460363 iterator wants A IN
> ns2.myhostadmin.net.
>   84    A IN wfkpqfkf.www.sidear.cn. 47.733132 iterator wants A IN
> ns2.myhostadmin.net.
>   85    A IN wvczepkp.www.sidear.cn. 50.092583 iterator wants A IN
> ns2.myhostadmin.net.
>   86    A IN ylyrghid.www.sidear.cn. 41.605773 iterator wants A IN
> ns2.myhostadmin.net.
>   87    A IN ytidermv.www.sidear.cn. 9.828912 iterator wants A IN
> ns2.myhostadmin.net.
>   88    A IN ajkrutsryb.www.sidear.cn. 53.798360 iterator wants A IN
> ns2.myhostadmin.net.
>   89    A IN arqjgbgjin.www.sidear.cn. 15.645930 iterator wants A IN
> ns2.myhostadmin.net.
>   90    A IN cpidahmvqt.www.sidear.cn. 7.909781 iterator wants A IN
> ns2.myhostadmin.net.
>   91    A IN ehitofszoh.www.sidear.cn. 51.570466 iterator wants A IN
> ns2.myhostadmin.net.
>   92    A IN epghgjobyn.www.sidear.cn. 49.514039 iterator wants A IN
> ns2.myhostadmin.net.
>   93    A IN gbovejqbir.www.sidear.cn. 51.530852 iterator wants A IN
> ns2.myhostadmin.net.
>   94    A IN gripcnujkv.www.sidear.cn. 15.703299 iterator wants A IN
> ns2.myhostadmin.net.
>   95    A IN ijoxyribqv.www.sidear.cn. 22.093370 iterator wants A IN
> ns2.myhostadmin.net.
>   96    A IN ipkjwzgbsf.www.sidear.cn. 18.951809 iterator wants A IN
> ns2.myhostadmin.net.
>   97    A IN ivenmtylwn.www.sidear.cn. 51.300647 iterator wants A IN
> ns2.myhostadmin.net.
>   98    A IN krqvojmngv.www.sidear.cn. 10.421760 iterator wants A IN
> ns2.myhostadmin.net.
>   99    A IN mbwrinyjsr.www.sidear.cn. 27.818190 iterator wants A IN
> ns2.myhostadmin.net.
> 100    A IN mfaperuzwj.www.sidear.cn. 10.417978 iterator wants A IN
> ns2.myhostadmin.net.
> 101    A IN mlgpctypiv.www.sidear.cn. 7.884987 iterator wants A IN
> ns2.myhostadmin.net.
> 102    A IN oxubapuzuf.www.sidear.cn. 22.094394 iterator wants A IN
> ns2.myhostadmin.net.
> 103    A IN ozwxqfylkb.www.sidear.cn. 27.816673 iterator wants A IN
> ns2.myhostadmin.net.
> 104    A IN srufqnonof.www.sidear.cn. 53.799629 iterator wants A IN
> ns2.myhostadmin.net.
> 105    A IN upypcxurmb.www.sidear.cn. 19.002303 iterator wants A IN
> ns2.myhostadmin.net.
> 106    A IN ynuzgzyzix.www.sidear.cn. 39.295484 iterator wants A IN
> ns2.myhostadmin.net.
> 107    A IN ypexwpcxyn.www.sidear.cn. 50.920139 iterator wants A IN
> ns2.myhostadmin.net.
> 108    A IN bvegojzxyzi.www.sidear.cn. 19.975944 iterator wants A IN
> ns2.myhostadmin.net.
> 109    A IN ehbzbczqepm.www.sidear.cn. 14.415002 iterator wants A IN
> ns2.myhostadmin.net.
> 110    A IN givnjwjnphi.www.sidear.cn. 46.720398 iterator wants A IN
> ns2.myhostadmin.net.
> 111    A IN gonnhwgbnzl.www.sidear.cn. 42.720044 iterator wants A IN
> ns2.myhostadmin.net.
> 112    A IN gslqbyafiqv.www.sidear.cn. 42.716279 iterator wants A IN
> ns2.myhostadmin.net.
> 113    A IN hfptiqnjkrn.www.sidear.cn. 49.709853 iterator wants A IN
> ns2.myhostadmin.net.
> 114    A IN hnpmvhynqhj.www.sidear.cn. 47.204509 iterator wants A IN
> ns2.myhostadmin.net.
> 115    A IN jmxigigifrw.www.sidear.cn. 8.069125 iterator wants A IN
> ns2.myhostadmin.net.
> 116    A IN kaxlfwkphnh.www.sidear.cn. 38.470971 iterator wants A IN
> ns2.myhostadmin.net.
> 117    A IN kdgyfqmfbyk.www.sidear.cn. 8.068407 iterator wants A IN
> ns2.myhostadmin.net.
> 118    A IN lskvlbsiwnz.www.sidear.cn. 27.452383 iterator wants A IN
> ns2.myhostadmin.net.
> 119    A IN mjrhfnruxkr.www.sidear.cn. 27.518935 iterator wants A IN
> ns2.myhostadmin.net.
> 120    A IN nvjifxlrdia.www.sidear.cn. 49.635749 iterator wants A IN
> ns2.myhostadmin.net.
> 121    A IN qfwiowmysds.www.sidear.cn. 14.490697 iterator wants A IN
> ns2.myhostadmin.net.
> 122    A IN rvjgiygcvtd.www.sidear.cn. 47.937117 iterator wants A IN
> ns2.myhostadmin.net.
> 123    A IN udghnznzesb.www.sidear.cn. 24.854974 iterator wants A IN
> ns2.myhostadmin.net.
> 124    A IN ybxikrfllfd.www.sidear.cn. 19.975561 iterator wants A IN
> ns2.myhostadmin.net.
> 125    A IN zdpcorkvvwu.www.sidear.cn. 48.517597 iterator wants A IN
> ns2.myhostadmin.net.
> 126    A IN anmdovchgxah.www.sidear.cn. 17.186747 iterator wants A IN
> ns2.myhostadmin.net.
> 127    A IN anofylgdybuf.www.sidear.cn. 25.255537 iterator wants A IN
> ns2.myhostadmin.net.
> 128    A IN clmbmpsbular.www.sidear.cn. 52.650671 iterator wants A IN
> ns2.myhostadmin.net.
> 129    A IN ebgpajyfazev.www.sidear.cn. 41.587735 iterator wants A IN
> ns2.myhostadmin.net.
> 130    A IN elarevyvobwl.www.sidear.cn. 49.360026 iterator wants A IN
> ns2.myhostadmin.net.
> 131    A IN etsfkzcfgdix.www.sidear.cn. 15.725886 iterator wants A IN
> ns2.myhostadmin.net.
> 132    A IN ezohqjmvadub.www.sidear.cn. 34.865704 iterator wants A IN
> ns2.myhostadmin.net.
> 133    A IN gbkfcpsjgheb.www.sidear.cn. 41.515665 iterator wants A IN
> ns2.myhostadmin.net.
> 134    A IN gpedmhabazor.www.sidear.cn. 54.426431 iterator wants A IN
> ns2.myhostadmin.net.
> 135    A IN grkjmdkvmvkb.www.sidear.cn. 17.520398 iterator wants A IN
> ns2.myhostadmin.net.
> 136    A IN ihaxozupcfqf.www.sidear.cn. 17.184805 iterator wants A IN
> ns2.myhostadmin.net.
> 137    A IN inanyxebozaz.www.sidear.cn. 51.762954 iterator wants A IN
> ns2.myhostadmin.net.
> 138    A IN inkrsbonapcd.www.sidear.cn. 19.425085 iterator wants A IN
> ns2.myhostadmin.net.
> 139    A IN kfkvibcpijap.www.sidear.cn. 19.474776 iterator wants A IN
> ns2.myhostadmin.net.
> 140    A IN kpijcbejencb.www.sidear.cn. 13.030587 iterator wants A IN
> ns2.myhostadmin.net.
> 141    A IN kvexsfivyjet.www.sidear.cn. 41.586191 iterator wants A IN
> ns2.myhostadmin.net.
> 142    A IN mhmfwvmbqhaz.www.sidear.cn. 7.046275 iterator wants A IN
> ns2.myhostadmin.net.
> 143    A IN mhutgbevgfsx.www.sidear.cn. 28.634404 iterator wants A IN
> ns2.myhostadmin.net.
> 144    A IN ohgzqjyzubwv.www.sidear.cn. 28.570450 iterator wants A IN
> ns2.myhostadmin.net.
> 145    A IN ohirihyhktaj.www.sidear.cn. 49.253445 iterator wants A IN
> ns2.myhostadmin.net.
> 146    A IN ojwvydqjopaj.www.sidear.cn. 17.477149 iterator wants A IN
> ns2.myhostadmin.net.
> 147    A IN otavsrihgvsh.www.sidear.cn. 7.155225 iterator wants A IN
> ns2.myhostadmin.net.
> 148    A IN otgbmdezsbgn.www.sidear.cn. 23.643597 iterator wants A IN
> ns2.myhostadmin.net.
> 149    A IN qdelkjstgnkt.www.sidear.cn. 22.390590 iterator wants A IN
> ns2.myhostadmin.net.
> 150    A IN qhwpkzubelil.www.sidear.cn. 23.614125 iterator wants A IN
> ns2.myhostadmin.net.
> 151    A IN stgvmvmxylex.www.sidear.cn. 15.724926 iterator wants A IN
> ns2.myhostadmin.net.
> 152    A IN ubovszyvmrux.www.sidear.cn. 21.482549 iterator wants A IN
> ns2.myhostadmin.net.
> 153    A IN wrmjcdalexcj.www.sidear.cn. 25.321208 iterator wants A IN
> ns2.myhostadmin.net.
> 154    A IN wrqnmnqfuduv.www.sidear.cn. 52.556483 iterator wants A IN
> ns2.myhostadmin.net.
> 155    A IN ybixkdqxklqv.www.sidear.cn. 28.653361 iterator wants A IN
> ns2.myhostadmin.net.
> 156    A IN almhihcrwbafwv.www.sidear.cn. 24.786379 iterator wants A IN
> ns2.myhostadmin.net.
> 157    A IN averargrgbuvkl.www.sidear.cn. 50.474760 iterator wants A IN
> ns2.myhostadmin.net.
> 158    A IN gbsngvgrmvejwb.www.sidear.cn. 24.764540 iterator wants A IN
> ns2.myhostadmin.net.
> 159    A IN glctkrgdojwpsb.www.sidear.cn. 53.031199 iterator wants A IN
> ns2.myhostadmin.net.
> 160    A IN ivglifkperwpgv.www.sidear.cn. 29.038691 iterator wants A IN
> ns2.myhostadmin.net.
> 161    A IN kfevwzclwdmdoh.www.sidear.cn. 24.575344 iterator wants A IN
> ns2.myhostadmin.net.
> 162    A IN krudkncrshifyf.www.sidear.cn. 10.024796 iterator wants A IN
> ns2.myhostadmin.net.
> 163    A IN qtcfonetwfmfif.www.sidear.cn. 41.786544 iterator wants A IN
> ns2.myhostadmin.net.
> 164    A IN sbojifsxmvqnkv.www.sidear.cn. 42.592631 iterator wants A IN
> ns2.myhostadmin.net.
> 165    A IN snencdanutynkd.www.sidear.cn. 53.121954 iterator wants A IN
> ns2.myhostadmin.net.
> 166    A IN ujyrqlahmzwngr.www.sidear.cn. 29.111417 iterator wants A IN
> ns2.myhostadmin.net.
> 167    A IN uvonilcvcjqhax.www.sidear.cn. 24.572564 iterator wants A IN
> ns2.myhostadmin.net.
> 168    A IN wpktklalgxqfid.www.sidear.cn. 22.094554 iterator wants A IN
> ns2.myhostadmin.net.
> 169    A IN wrolwvihwpcfqv.www.sidear.cn. 20.213483 iterator wants A IN
> ns2.myhostadmin.net.
> 170    A IN ybkhyncjkjmdml.www.sidear.cn. 20.214726 iterator wants A IN
> ns2.myhostadmin.net.
> 171    A IN fbcdn-profile-a.akamaihd.net. - iterator wait for
> 2.22.230.129 172    A IN abupkvgrubmrwniv.www.sidear.cn. 30.228467
> iterator wants A IN ns2.myhostadmin.net.
> 173    A IN ebgxexmtytmnczol.www.sidear.cn. 30.150206 iterator wants A
> IN ns2.myhostadmin.net.
> 174    A IN enqlufapqlitqdif.www.sidear.cn. 6.351402 iterator wants A
> IN ns2.myhostadmin.net.
> 175    A IN ghwdqjexkrkpwlwf.www.sidear.cn. 26.862038 iterator wants A
> IN ns2.myhostadmin.net.
> 176    A IN gnchgvqxkrsvkfwn.www.sidear.cn. 3.332469 iterator wants A
> IN ns2.myhostadmin.net.
> 177    A IN ifebafwtyfopyhkb.www.sidear.cn. 53.976731 iterator wants A
> IN ns2.myhostadmin.net.
> 178    A IN ilqvcbklgrqvixin.www.sidear.cn. 3.034479 iterator wants A
> IN ns2.myhostadmin.net.
> 179    A IN itqzydqpanubkncj.www.sidear.cn. 19.094262 iterator wants A
> IN ns2.myhostadmin.net.
> 180    A IN ivwvqpczcfijeton.www.sidear.cn. 47.536110 iterator wants A
> IN ns2.myhostadmin.net.
> 181    A IN oharytojsnatcnqr.www.sidear.cn. 12.400879 iterator wants A
> IN ns2.myhostadmin.net.
> 182    A IN qxenmhizsrqvuhsp.www.sidear.cn. 6.642887 iterator wants A
> IN ns2.myhostadmin.net.
> 183    A IN shqlgzyjinmnobon.www.sidear.cn. 26.924261 iterator wants A
> IN ns2.myhostadmin.net.
> 184    A IN ufkhupcpgjqlqreh.www.sidear.cn. 47.538700 iterator wants A
> IN ns2.myhostadmin.net.
> 185    A IN yfkzmnshejazefwh.www.sidear.cn. 25.165260 iterator wants A
> IN ns2.myhostadmin.net.
> 186    A IN ynkpmvmnodclklob.www.sidear.cn. 7.818328 iterator wants A
> IN ns2.myhostadmin.net.
> 187    A IN fbcdn-sphotos-g-a.akamaihd.net. - iterator wait for
> 61.213.146.4
>
> Any ideas or suggestions are welcome.
> Cheers,
> Thomas
> _______________________________________________
> Unbound-users mailing list
> Unbound-users at unbound.net
> http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20140530/3f16234e/attachment.htm>

More information about the Unbound-users mailing list