Comment by warkdarrior

That's just the braindeqd design of DNS, responding to arbitrary UDP packets without authenticating the IP address of the sender.