Subj : Re: DNS Nodelist available for fsxnet
To   : Zip
From : deon
Date : Mon Nov 13 2023 08:10 am

  Re: Re: DNS Nodelist available for fsxnet
  By: Zip to deon on Sat Nov 11 2023 03:25 pm

Howdy,

 >  de> Although you have mentioned server 83.255.255.1, I actually have an IP
 >  de> block on 83.255.224.0/24 (perhaps 255.1 uses?). When I enabled the DNS
 >  de> queries, several servers in this block were hammering clrghouz - 10+
 >  de> queries a second, and to the same records (so not honouring the TTL).
 >
 > Yep! That netblock belongs to Tele2, one of the major ISPs here in Sweden
 > (who in recent years acquired a company called ComHem, one of the major
 > players in residential broadband here).

So I updated clrghouz yesterday as per RFC2308 and included an SOA record with negative hits. This has reduced the queries dramaticaly coming from this net block, so I wont re-enable the block. (Since I have a TTL of 1 day, hopefully those server errors on queries should be gone now.)

I'm still getting queries every minute or so for 21:1/1, 21:1/2 and 21:1/3.

[2023-11-13 07:55:37] production.INFO: PD-:= DNS Query from [::ffff:83.255.224.43] for [_binkp._tcp.f1.n1.z21.fsxnet.nz] {"pid":1690}
[2023-11-13 07:56:56] production.INFO: PD-:= DNS Query from [::ffff:83.255.224.35] for [_binkp._tcp.f3.n1.z21.fsxnet.nz] {"pid":1692}
[2023-11-13 07:56:58] production.INFO: PD-:= DNS Query from [::ffff:83.255.224.35] for [_binkp._tcp.f3.n1.z21.fsxnet.nz] {"pid":1693}

I'm curious (only because you mentioned you use a DNS server in the 83.255/16 block) - do you have something trying to talk to those hosts? Those servers are querying for those FTNs quite often (and they dont exist).


....лоеп
--- SBBSecho 3.20-Linux
 * Origin: I'm playing with ANSI+videotex - wanna play too? (21:2/116)

.