Timothy Goddard wrote:
The issue is that the DLink DSL-502T router as shipped in large numbers by Xtra has a flaw in the DNS resolver. If a DNS request for an AAAA record is sent to the router, I've observed it sending back a malformed response packed. This would only be a minor irritation, except that it seems to corrupt the DNS cache such that subsequent requests for A records return the address 1.0.0.0 .
Just thought I'd let people know that we have a possibly significant national source of this traffic. While probably fairly low in volume at the moment, it would be entirely possible for example that an update to Windows could trigger a sudden increase.
Interesting - I imagine it's a worldwide problem unless there's something NZ-specific about the software Xtra has deployed? I guess it also means it won't do v6 correctly.... Study on 1/8 traffic here: http://www.potaroo.net/studies/1slash8/1slash8.html An interesting read.