Ray Van Dolson wrote:
1.8GB's of these seems incredibly excessive... I wonder if they're not legitimate DNS requests trying to get to you because you're the SOA for some domain...
I've seen this sort of behavior from broken resolvers trying to follow a fully-lame delegation. If you suspect that could be it, try a dns report of the domain being queried. http://member.dnsstuff.com/pages/dnsreport.php