Re: Using TCP for checking

In article , Ben Croswell wrote: > My one caution on this would be you may run into false negatives with TCP if > people have misconfigured firewalls. > It's surprising the number of people out there that believe TCP is only for > xfers. You'll also run into it for any domains hosted by Akamai.

Re: Using TCP for checking

My one caution on this would be you may run into false negatives with TCP if people have misconfigured firewalls. It's surprising the number of people out there that believe TCP is only for xfers. -- -Ben Croswell On Tue, Apr 7, 2009 at 3:17 PM, Mark Elkins wrote: > I'm involved in the CO.ZA

Re: Using TCP for checking

RFC 1123 (Section 6.1.3.2) says "DNS servers MUST be able to service UDP queries and SHOULD be able to service TCP queries.". You, as a registry, may opt to enforce a "must service TCP queries" policy, but if you're checking minimal standards-conformance, UDP is mandatory, TCP is optional, you

Using TCP for checking

I'm involved in the CO.ZA Registry. In the process of registering a domain name in the co.za zone - we do a bunch of DNS checks using 'dig'. for each nameserver, a) check that the zone exists (fetch the SOA), b) fetch the NS RRSet count and compare entries. c) if Nameserver inside the dom