Denial of Service using Nameservers

[chenn]

Hi all.
There is something weird going on with my companies nameservers. They keep sending queries to an address, absolutely congesting that network. It is really a tricky
thing and seems more like DoD attack with a spoofed address.
Did anyone experience something like that before? Any hints?

thanks a lot.
regards
chenn

 

[DarkShad]

You are most probably right about the IP spoofing, you may wish to view some of this text at this link.

http://www.cis.ohio-state.edu/htbin/rfc/rfc2267.html

Hope this will help you.