Re: [SLUG] bind attacks

[Glen Turner <gdt@xxxxxxxxx>]

Alex Samad wrote:

> Jun 25 15:20:28 hufpuf named[3574]: client 59.151.50.247#9753: query
> (cache) './A/IN' denied

> can somebody shed some light on what they think they can gain ?

Perhaps it's a DDoS attack seeking to hide it's originating IP address.
Probably best to blackhole responses for exterior requests for ".".