DNSアンプ攻撃観測 (ietf.org)

説明はいらないIETFドメイン.DNSSECで膨れ上がるのは避けられないのか・・・

$ dig @::1 ietf.org any
;; Truncated, retrying in TCP mode.

; <<>> DiG 9.7.6-P1 <<>> @::1 ietf.org any
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15216
;; flags: qr rd ra; QUERY: 1, ANSWER: 25, AUTHORITY: 0, ADDITIONAL: 2

;; QUESTION SECTION:
;ietf.org.			IN	ANY

;; ANSWER SECTION:
ietf.org.		1800	IN	SOA	ns0.ietf.org. glen.amsl.com. 1200000189 1800 1800 604800 1800
ietf.org.		1800	IN	RRSIG	SOA 5 2 1800 20141005142200 20131005132312 40452 ietf.org. qZtJJUCC8g/u3UtZ6ce/6XJZZBFc8Py1XUxsUQjE+FYEtM/ZphLqx491 uJiqPnw1zH8xiCeSPhnSSYHWYAQuuB+S3/Xf41JmXE3TvWv36LTmGC8Z JpIGsB9twizqbuH1K3KJxEAfUeGrFjill8PhL3FNO+33yDbxmBSxNePc kh9V2GZlUBk1Y2nIzEgRPzPArkjzKo/gsVqXf3QhfAeo+nr/Wslu2rQJ yAwxn+/lupR+43Tsp15AOE/iJfVGKXBKWgHQQeShFmEHY7s7CtgCyWAz kBkmF3Bwhw6IfGMZaBBFEL5y33nftJuCS4q3j0ibwl0xFoLniGqcm6MX V2RKsQ==
ietf.org.		1800	IN	NS	ns1.ams1.afilias-nst.info.
ietf.org.		1800	IN	NS	ns1.sea1.afilias-nst.info.
ietf.org.		1800	IN	NS	ns1.mia1.afilias-nst.info.
ietf.org.		1800	IN	NS	ns0.amsl.com.
ietf.org.		1800	IN	NS	ns1.hkg1.afilias-nst.info.
ietf.org.		1800	IN	NS	ns1.yyz1.afilias-nst.info.
ietf.org.		1800	IN	RRSIG	NS 5 2 1800 20141005142154 20131005132312 40452 ietf.org. jzt9WP7ciMq7pIAz31vQX/qr8RM8ZDQrTC9HK6YEwa96cGY3IbGr91KT IjpPnyb/T605rAk8DfGKX9CrJOKeGA3JekG6eBWs2bwGWZbLgoUwtfI4 sePkPsneFQk+WR0dl/K5lHTU/a9DodsYQhY98dMHSDK0nYctSScrCURP 0V9+4aG9k28HA5oZzC3LtQY63uzleieh+am1sPqX0HtHnUEvIEJ3FtzB y+po+lye/Fmj7CJXE+CDvwhtXRYbVhi/oQqQMQF6+QKCGAE2/p2yMd8U Zcu0uL3NkiiChINLfwIxB9K4vZQyqneX/OX1Tv8tVSEDb7br0hKV7Cpd wAMQ9w==
ietf.org.		1800	IN	A	12.22.58.30
ietf.org.		1800	IN	RRSIG	A 5 2 1800 20141005142303 20131005132312 40452 ietf.org. j8/lX7JcNljhbKDPihih2Mil1uOBhpwX7zghqhkdDC2nYVZp4q+INucf YkmCCsKCOjaUaUogm+1B9IWewFln+YA4DGvSxCXQj8ugtl8kFauxtlMK 24KQH4g15SwhDEKmkNygQB2r6PjDXtwwODxFKQsL7Gnyvpb638IaQ5UI LHye4JikzEstmQ9kOuUz71CV/nU/aDkem2U8pMykxyudTSL6uq6YyBN5 GH8GzZNrMyDCmUxKxbLAq+QbH2XFf/s75Zp38JnTuMEUP+NvBcaWl/5e f1W9veXIrxC+/XugE0rA+oWvgKwocULJNpgM4BnqFZ0TplevpM2hxxYM x9naPA==
ietf.org.		1800	IN	MX	0 mail.ietf.org.
ietf.org.		1800	IN	RRSIG	MX 5 2 1800 20141005142036 20131005132312 40452 ietf.org. oD7YBiYO+SEa09TNK1Qveq9lz4tJmvKv5W4wdnZU+cNXQTwODOFga2ra 7pqdY4eJz1almmUAR3Q2bugtFhOXBAA89D71NoawLhVnW6kLI38YOyXx //bpVLNN0Wz9CxA/T2PigWbwRwloe9I1lbhAuEL+7z8IYxZSgTk9bMSO VKynBYRloJ/gfSCi+GVjsqQKecT6h/NwfJJqVC9VuTTonLAeD/K5sWTT up5oOCdC9QYdruLq8dWYpAf44Lvj40ZTKtCjnggc5yFYCPupuDE7ENad iIAZxuqzshxXrcpklB0Eeifbd9ofVd8eTt+PNvCnJhlcK2AOjvBh+aKt YEYw/A==
ietf.org.		1800	IN	TXT	"v=spf1 ip4:12.22.58.0/26 ip4:64.170.98.0/26 ip4:209.208.19.192/27 ip6:2607:f170:8000:1500::0/64 ip6:2001:1890:123a::0/56 ip6:2001:1890:126c::0/56 -all"
ietf.org.		1800	IN	RRSIG	TXT 5 2 1800 20141005142022 20131005132312 40452 ietf.org. ISIZrTOa4Uz7KDL1KO7V53lXIp4KECyTA7pEgqj4M8O991e+ykSpx4oQ JZ1B16zgMUKWPMrHnP5G3A9VKAmYp43lPnapQTyGNhd/l2z4SxU2Rmjr EYOI0SrRCTT6FNw8XBnDENRqr749kECQLPOjOGfrHwrepG78rORShxVa HhzHxaouyv7qE8Gx6MYPXFt92AnPj0IkljbMQiomqTgTvRdVX9Cdwp34 nQcjLK/550SleqM21hXTVhd46R9OT2/w/Q4n/6FTSRyGo0v3FOyC2E6B iDPr/rOnI7YaNO4c+bR5gAQ4T0Lrr0OEGRp/A9l6xaInGa31cGQH0gbZ ZzIKGg==
ietf.org.		1800	IN	AAAA	2001:1890:123a::1:1e
ietf.org.		1800	IN	RRSIG	AAAA 5 2 1800 20141005142143 20131005132312 40452 ietf.org. iZFEbjZP/ZemUxlSUr0gt6CySYaUypIUQYWkYRRexeyC4G3Snfyi21cW ErYitL/auUfVWbEujbFavBQ+fEtbtwzwQt0k2frT6Vzd8N5J3sgwmZ8a LWDMdJnEoFCn3JC+hVBxrKKfgR8JYZx0VCUavCliMCjGDn917Kwe+hQk 4S3CRmlRLi4Hum7yZPv1ukXHqErCiPpnaq4k9eXElXhX9z3hkpRCkzzg zjaM9FplG3wIH0knyytvLkytQEU8I5DIX7yHVzR10Z3fvIO3ibZKoVXx oxPfsG8SEhcVpAstTn0VvSqpcSJd35BdV1idUkVUCpcYq+tjL19s2oXR ccfUmw==
ietf.org.		1800	IN	NSEC	ietf1._domainkey.ietf.org. A NS SOA MX TXT AAAA RRSIG NSEC DNSKEY SPF
ietf.org.		1800	IN	RRSIG	NSEC 5 2 1800 20141005142148 20131005132312 40452 ietf.org. ng9FVyGwVtbYp7nSpSTELROWYdzQ20KbM3Jju2UA2X1tq97RCJf3ZIZI YRCBbHYzd22UYtnc/K+s4FYyjLrdzr61lHDSTvwpJgMue9sYIyIunYNk z8sOz93FKmURSDdpQeCUvXiv50+1XYJQ+mnyIsdFlAUGzT1eZ6ktWgKW YS1qtJMBY3pcpqxGu44ushjNPmq6eGyCXP1bvFOetIFMIRORPso+zR5E m6JrFSgf5fR2mUuOD7SHit1kRjoofnXcEFeyx1YRerfZPCHRwN2yab4P jf7sScC9ODyt9Q+Eo4y7gMJDNYkKC932voaa/ZSyq3HqzhHhCWH0FdYr KExHhQ==
ietf.org.		1800	IN	DNSKEY	257 3 5 AwEAAavjQ1H6pE8FV8LGP0wQBFVL0EM9BRfqxz9p/sZ+8AByqyFHLdZc HoOGF7CgB5OKYMvGOgysuYQloPlwbq7Ws5WywbutbXyG24lMWy4jijlJ UsaFrS5EvUu4ydmuRc/TGnEXnN1XQkO+waIT4cLtrmcWjoY8Oqud6lDa Jdj1cKr2nX1NrmMRowIu3DIVtGbQJmzpukpDVZaYMMAm8M5vz4U2vRCV ETLgDoQ7rhsiD127J8gVExjO8B0113jCajbFRcMtUtFTjH4z7jXP2ZzD cXsgpe4LYFuenFQAcRBRlE6oaykHR7rlPqqmw58nIELJUFoMcb/BdRLg byTeurFlnxs=
ietf.org.		1800	IN	DNSKEY	256 3 5 AwEAAdDECajHaTjfSoNTY58WcBah1BxPKVIHBz4IfLjfqMvium4lgKtK ZLe97DgJ5/NQrNEGGQmr6fKvUj67cfrZUojZ2cGRizVhgkOqZ9scaTVX NuXLM5Tw7VWOVIceeXAuuH2mPIiEV6MhJYUsW6dvmNsJ4XwCgNgroAmX hoMEiWEjBB+wjYZQ5GtZHBFKVXACSWTiCtddHcueOeSVPi5WH94Vlubh HfiytNPZLrObhUCHT6k0tNE6phLoHnXWU+6vpsYpz6GhMw/R9BFxW5Pd PFIWBgoWk2/XFVRSKG9Lr61b2z1R126xeUwvw46RVy3hanV3vNO7LM5H niqaYclBbhk=
ietf.org.		1800	IN	RRSIG	DNSKEY 5 2 1800 20141005142233 20131005132312 40452 ietf.org. ycOZ3CwYOirGr8pVSoliTguY0/H48cQvqu5TQ7dfTdS2zv6BCtyGAsPz yJBggqJFOiuth4ju2C1J8mA+1bYov3Keo2G3YvaHz1i2LDWp2ZUH1UWn hIpbbevKTQ7vvY3P3QXW0z86uaiy82Ki3/BD2AZw5/+a2U88hSBGAUnd LSZtnGyBFwwvQojM5d0OGuTzii4uopmXb3gKfDL0/8SPGt0b9H2FRvak tM3XlcaPbj93ZL217RhNnE+cznBDfWkEZFMiOTCMj7thfnYZ91W60AD9 fMIXpQ3GM6NWDboomHTTJxObv9j8uYl1pdVDnGCEKJ7IFhpm/CsvzRjZ 9fGSkg==
ietf.org.		1800	IN	RRSIG	DNSKEY 5 2 1800 20141005142239 20131005132312 45586 ietf.org. CNa7Tr6S0bO3lin4AChKWkfUmExogYNwRucMyotgcgMtgzSeG9p7IFib YHH41aPMq9q9jPU4KzAoH6H62DlnbSxcv7MqYbIN+gQXKkXOIxw8qu0M vUpaPZTAupmcZEk3evQj2xusYTd/j7UKA++C/7xWznaeZKXQMxpqcJU8 6sKrmQtMGmwSpy1FqaSxuPrP8QdEf4EF2PAJubQLnS+O8o5s6CsefFKy f3z3aPfUctjkbGOcNAS7shogwcE9ftIbnRdk+Idsnopy+5uYbNgQ9p1N NgIUXqEg4XLdyA6jCefisntUEXwEyccKT7yoJnBjq5pnRWheVGWrPlIk ATG6IQ==
ietf.org.		1800	IN	SPF	"v=spf1 ip4:12.22.58.0/26 ip4:64.170.98.0/26 ip4:209.208.19.192/27 ip6:2607:f170:8000:1500::0/64 ip6:2001:1890:123a::0/56 ip6:2001:1890:126c::0/56 -all"
ietf.org.		1800	IN	RRSIG	SPF 5 2 1800 20141005142242 20131005132312 40452 ietf.org. exnxgXoyzhNRgw+HO/c7xqjLVr7Rv2/eL4nkwah815MlR7WEtXPiyBhs SYorGyuKGPzG781BriBf7tjz0sxjy4eDYJlPPlGhaGJXZiGpW14gMEoO 8Td9BL4k6zAOyMTsHCcCzwfMYaIx1xCu8FyMjk+TPmUHLVfJyyydcSa4 j5cZJNRcZKZwQGoo+YWrPzT0N0HLuvhNFe/fs4p0QoMmggdWcbMuEfRB rK+XIBwt8lmvuRqwfR51Cc9a67Hd0ZYisq7d8nctQSmHZNZMGDuU3DvT nfC2mXi6DmgvCxCiTjQGXV9etb0yc75x+Jep+9Gs/sLzIOYzB6xYCKx/ m5yZdA==

;; ADDITIONAL SECTION:
mail.ietf.org.		1800	IN	A	12.22.58.30
mail.ietf.org.		1800	IN	AAAA	2001:1890:123a::1:1e

;; Query time: 4 msec
;; SERVER: ::1#53(::1)
;; WHEN: Fri Oct 11 12:21:55 2013
;; MSG SIZE  rcvd: 4229