help!

[Tim Maestas]

	We had the same problem where I work.  It was generated
	by some kind of software by broderbund, now owned by Matell
	I believe.  The client software is, to put it mildly, broken.
	Upon receiving an NXDOMAIN, instead of shutting up, it keeps
	querying over and over and over.  This software was bundled
	with popular versions of Print Shop Deluxe, along with other
	software made by broderbund.  There is an uninstall for this
	client out on the net somewhere.  What we ended up doing was
	just hosting brodcast.net on our nameservers, and handing back
	the loopback address in response to a www query.  Yes, this blinds
	our users to the brodcast.net domain, but that domain doesn't 
	(currently) exist anymore, and it shut the queries up.  

-Tim

On Thu, 28 Dec 2000, Duane Cox wrote:

> 
> our nameservers are for the past week getting way overworked..
> when i started looking into this, i found out that our dialup customers
> apparently, unless the ip is spoofed, all of them seem to be sending this
> request
> below.. all for the same place, that does not exist... whats up?
> 
> this is bind 8.2.2-p7 on redhat linux 7.0.
> 
> duane cox
> 
> --------------------------------------------------------
> 
> 28-Dec-2000 14:19:59.930 queries: info:
> XX+/63.146.45.67/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:00.150 queries: info:
> XX+/63.146.45.129/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:00.161 queries: info:
> XX+/63.146.45.67/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:00.369 queries: info:
> XX+/63.146.45.67/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:00.581 queries: info:
> XX+/63.146.45.67/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:00.843 queries: info:
> XX+/63.146.45.129/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:00.890 queries: info:
> XX+/63.146.45.67/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:01.025 queries: info:
> XX+/63.146.45.158/www.hotmail.msn.com/A/IN
> 28-Dec-2000 14:20:01.100 queries: info:
> XX+/63.146.45.67/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:01.361 queries: info:
> XX+/63.146.45.110/www.brodcast.net.net66.com/A/IN
> 28-Dec-2000 14:20:01.483 queries: info:
> XX+/63.146.45.129/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:01.546 queries: info:
> XX+/63.146.45.223/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:01.569 queries: info:
> XX+/63.146.45.67/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:01.728 queries: info:
> XX+/63.146.45.144/www.hotmail.com/A/IN
> 28-Dec-2000 14:20:02.080 queries: info:
> XX+/63.146.45.67/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:02.190 queries: info:
> XX+/63.146.45.129/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:02.689 queries: info:
> XX+/63.146.45.67/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:02.844 queries: info:
> XX+/63.146.45.129/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:02.901 queries: info:
> XX+/63.146.45.67/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:02.924 queries: info:
> XX+/63.146.45.223/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:03.161 queries: info:
> XX+/63.146.45.67/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:03.180 queries: info:
> XX+/63.146.45.110/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:03.469 queries: info:
> XX+/63.146.45.67/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:03.537 queries: info:
> XX+/63.146.45.129/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:03.700 queries: info:
> XX+/63.146.45.67/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:04.069 queries: info:
> XX+/63.146.45.67/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:04.177 queries: info:
> XX+/63.146.45.129/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:04.289 queries: info:
> XX+/63.146.45.67/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:04.292 queries: info:
> XX+/63.146.45.9/178.47.146.63.in-addr.arpa/PTR/IN
> 28-Dec-2000 14:20:04.520 queries: info:
> XX+/63.146.45.67/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:04.729 queries: info:
> XX+/63.146.45.110/www.brodcast.net.net66.com/A/IN
> 
> 
>