----- Original Message ----- From: "Randy Bush" <randy@psg.com> To: "Christopher L. Morrow" <christopher.morrow@mci.com> Cc: <nanog@merit.edu> Sent: Tuesday, April 26, 2005 16:35 Subject: Re: Problems with NS*.worldnic.com
lots of folk sent email to me and not the list. most report worldnic responding with tcp 53 and not udp. would love to hear confirmation on list. can think of a number of causes, one possible, but just a stab in the dark, would be an intentional hack as a defense to a spoofed-ip attack.
That is a bind issue when receiving empty response from worldnic ns on udp queries, it asks again on tcp which is very slow. more here: http://isc.sans.org/diary.php?date=2005-04-22
what are some names known to be hosted on worldnic?
randy
aljuhani