A.k.a. draft-ietf-dnsop-as112-under-attack-help-help-02

It sounds unbelievable but there are people who really believe that the DNS query responses are attacks. The origin of these “attacks” originate from inside their network, where poorly configured DNS servers and clients forward DNS queries to the IANA servers.

The IETF draft explains this issue in very deep detail for DNS queries, but unfortunately this isn’t only true for DNS queries, it’s also true for NTP queries. Some admins of NTP pool servers were already struggling with complaints about “attacks” from their NTP servers.