Re: [Pdns-users] Massive DNS DDOS attack

2007-10-10 Thread Patrick Domack
Looks like someone using the dns vpn to me. It could easily be a virus talking back for instructions though. Quoting Dan Nica <[EMAIL PROTECTED]>: since sunday night the DDOS stared, I think it is a new virus, but we didn't find anything about this virus ... we have limited the queries with a

Re: [Pdns-users] Massive DNS DDOS attack

2007-10-10 Thread Dan Nica
since sunday night the DDOS stared, I think it is a new virus, but we didn't find anything about this virus ... we have limited the queries with an iptables rule :) On Wed, 10 Oct 2007, GAVARRET, David wrote: > Hi all, > > it seems that, at least in France since monday, we are under a massive

[Pdns-users] Massive DNS DDOS attack

2007-10-10 Thread GAVARRET, David
Hi all, it seems that, at least in France since monday, we are under a massive DDOS attack, with tons of queries (probably coming from some customers' zombies PC) concerning nx hosts on some russian domains like the following : q6y8La01ami4707SmEIY0R5SJ8.ultra-online.ru 60G6eR2dAgC1VTA43ox4F0Cu3JJ