help!

[Barry Margolin]

In article <92g7p7$3el at pub3.rc.vix.com>, Duane Cox <dcox at coxnetwork.com> wrote:
>our nameservers are for the past week getting way overworked..
>when i started looking into this, i found out that our dialup customers
>apparently, unless the ip is spoofed, all of them seem to be sending this
>request
>below.. all for the same place, that does not exist... whats up?

I'm not sure why all your customers are asking for it at the same time.
Maybe there's a link to www.broadcast.net on your home page?

>--------------------------------------------------------
>
>28-Dec-2000 14:19:59.930 queries: info:
>XX+/63.146.45.67/www.brodcast.net/A/IN

I don't have any problem looking up www.broadcast.net:

% dig www.broadcast.net a @ns.texan.net +norec

; <<>> DiG 8.1 <<>> www.broadcast.net a @ns.texan.net +norec 
; (1 server found)
;; res options: init defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10
;; flags: qr aa ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2
;; QUERY SECTION:
;;	www.broadcast.net, type = A, class = IN

;; ANSWER SECTION:
www.broadcast.net.	1D IN CNAME	broadcast.net.
broadcast.net.		1D IN A		208.244.32.10

;; AUTHORITY SECTION:
broadcast.net.		1D IN NS	ns.texan.net.
broadcast.net.		1D IN NS	ns1.alphadata.net.

;; ADDITIONAL SECTION:
ns.texan.net.		1D IN A		208.244.32.2
ns1.alphadata.net.	1d21h2m19s IN A  207.193.224.1

;; Total query time: 87 msec
;; FROM: tools to SERVER: ns.texan.net  208.244.32.2
;; WHEN: Thu Dec 28 15:41:30 2000
;; MSG SIZE  sent: 35  rcvd: 161

-- 
Barry Margolin, barmar at genuity.net
Genuity, Burlington, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.