Re: [swinog] DDOS DNS Attack by Netgear Products caused by CNAME instead of A record?

Hello Jeroen

If you are doing that, do it only for time-g.netgear.com by defining a zone for that and using '@' to get the record defined, that way you don't cause colateral damage to the many other records that might exist in netgear.com

Thanks for pointing out. Your solution is much a nicer than my approach. Looks like Scalpell vs. Hammer. :)

Tranalyzer only analyzes as far as I recall and the slides do not indicate differently...

You are right. I was more referring to his presentation-style at SwiNOG #26 which referred a lot to "what's that hex?" ;)