Problems resolving a domain

[Mike Hammett]

Well, that or is spoofing my honeypot address so that legitimate sites respond to it. sigh What a bunch of sad fucks... 




----- 
Mike Hammett 
Intelligent Computing Solutions 
http://www.ics-il.com 



Midwest Internet Exchange 
http://www.midwest-ix.com 


----- Original Message -----

From: "Mike Hammett via Unbound-users" <unbound-users at unbound.net> 
Cc: unbound-users at unbound.net 
Sent: Monday, November 2, 2015 12:37:57 PM 
Subject: Re: Problems resolving a domain 


Source of the problem: My honeypot blacklist rules on my border router. Any scans that hit my honey pot IP get thrown into an address list. That address list is dropped at the border. Someone spoofed the IPs of those nameservers. 




----- 
Mike Hammett 
Intelligent Computing Solutions 
http://www.ics-il.com 



Midwest Internet Exchange 
http://www.midwest-ix.com 


----- Original Message -----

From: "Mike Hammett via Unbound-users" <unbound-users at unbound.net> 
To: unbound-users at unbound.net 
Sent: Sunday, October 25, 2015 10:18:40 AM 
Subject: Problems resolving a domain 


http://pastebin.com/Sux9B0PW 

Anyone see why anidb.net can't be resolved through my Unbound server? it's been an ongoing issue for a few months on two of my Unbound boxes. It works elsewhere. I couldn't find anything useful in the log, but I'm far from an expert. 

I set syslog to allow 2000 entries per second (otherwise I'd hit a ratelimiter). I also set Unbound to a verbose level of 5. 

----- 
Mike Hammett 
Intelligent Computing Solutions 
http://www.ics-il.com 



Midwest Internet Exchange 
http://www.midwest-ix.com 



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20151102/75fac154/attachment.htm>