server sending syn to port 53
Oscar Ricardo Silva <[email protected]>
| Newsgroups | gmane.network.djbdns |
|---|---|
| Organization | The University of Texas at Austin |
| Message-ID | <[email protected]> |
We were notified that one of our servers running dnscache were generating a syn attack on a target dns servers. Sure enough, when we looked we saw that we were sending SYN packets to these servers. I'm not saying it's dnscache causing this but the pattern appears to be that we send a query and then right afterwards, several SYN packets to the same server. Oscar