DNS服务器大量日志：error sending response: host unreachable，什么原因？

Question

本帖最后由 Bsdder 于 2011-04-16 22:13 编辑

DNS日志里有大量的服务器（32.35.25.4）所在网段IP的错误日志，是什么原因呢？我看了下arp表，这些地址并没有使用的，为什么DNS会发送大量的回包呢？是谁发起的查询请求？

Apr 16 22:03:44 dns1 named[15812]: client 32.35.25.89#40921: view internet: error sending response: host unreachable
Apr 16 22:03:44 dns1 named[15812]: client 32.35.25.39#32874: view internet: error sending response: host unreachable
Apr 16 22:03:44 dns1 named[15812]: client 32.35.25.52#39537: view internet: error sending response: host unreachable
Apr 16 22:03:44 dns1 named[15812]: client 32.35.25.30#33781: view internet: error sending response: host unreachable
Apr 16 22:03:45 dns1 named[15812]: client 32.35.25.83#35455: view internet: error sending response: host unreachable
Apr 16 22:03:45 dns1 named[15812]: client 32.35.25.48#33046: view internet: error sending response: host unreachable
Apr 16 22:03:45 dns1 named[15812]: client 32.35.25.34#34372: view internet: error sending response: host unreachable
Apr 16 22:03:46 dns1 named[15812]: client 32.35.25.30#41916: view internet: error sending response: host unreachable
Apr 16 22:03:46 dns1 named[15812]: client 32.35.25.96#35251: view internet: error sending response: host unreachable
Apr 16 22:03:46 dns1 named[15812]: client 32.35.25.103#34390: view internet: error sending response: host unreachable
Apr 16 22:03:46 dns1 named[15812]: client 32.35.25.0#36058: view internet: error sending response: permission denied
Apr 16 22:03:46 dns1 named[15812]: client 32.35.25.48#37569: view internet: error sending response: host unreachable
Apr 16 22:03:47 dns1 named[15812]: client 32.35.25.25#37618: view internet: error sending response: host unreachable
Apr 16 22:03:47 dns1 named[15812]: client 32.35.25.98#42017: view internet: error sending response: host unreachable
Apr 16 22:03:47 dns1 named[15812]: client 32.35.25.50#38884: view internet: error sending response: host unreachable
Apr 16 22:03:47 dns1 named[15812]: client 32.35.25.83#40704: view internet: error sending response: host unreachable
Apr 16 22:03:47 dns1 named[15812]: client 32.35.25.96#42026: view internet: error sending response: host unreachable
Apr 16 22:03:48 dns1 named[15812]: client 32.35.25.21#39445: view internet: error sending response: host unreachable
Apr 16 22:03:48 dns1 named[15812]: client 32.35.25.63#36097: view internet: error sending response: host unreachable

更奇怪的为何会有整个网段来发起请求的：

Apr 16 22:03:46 dns1 named[15812]: client 32.35.25.0#36058: view internet: error sending response: permission denied

Answer 1

遭到攻击了吧！

Answer 2

多谢! 那他是怎么攻击的？fault IP，怎样对付？

Answer 3

刚才查了一下，可能是DNS Reflection Attack ，解决办法：无 。悲哀！

Answer 4

IP都是伪造的，没有什么好的解决办法，只能提高自身免疫力了。

Answer 5

这个怎么搞
我也想知道555555

Answer 6

怎么你也有类似攻击？ 我以为这个世界只有我是不幸的，看来还有人给我一样的。