Re: [dns-operations] DNS attacks against FR/BE/NL resolvers of Internet access providers

2020-09-14 Thread Damian Menscher via dns-operations
--- Begin Message --- You say: There are a great many public resolvers, the best known ones among which > are operated by the major US corporations that have cornered a large > proportion of Internet services and are often referred to as “GAFA” (from > the initials of Google, Amazon, Facebook and

Re: [dns-operations] DNS attacks against FR/BE/NL resolvers of Internet access providers

2020-09-14 Thread Keith Mitchell
On 9/14/20 1:54 PM, Fernando Gont wrote: > On 14/9/20 10:14, Stephane Bortzmeyer wrote: >> On 1 and 2 September 2020, several French IAPs (Internet Access >> Providers), including SFR and Bouygues, were "down". Their DNS >> resolvers were offline, and it does indeed seem that this was the >> result

Re: [dns-operations] DNS attacks against FR/BE/NL resolvers of Internet access providers

2020-09-14 Thread Fernando Gont
On 14/9/20 10:14, Stephane Bortzmeyer wrote: On 1 and 2 September 2020, several French IAPs (Internet Access Providers), including SFR and Bouygues, were "down". Their DNS resolvers were offline, and it does indeed seem that this was the result of an attack carried out against these resolvers. h

Re: [dns-operations] Shutdown of OARC's ODVR service

2020-09-14 Thread Matthew Pounsett
This is a reminder that OARC is intending to shut down our ODVR service (Open DNSSEC Validating Resolver) at the end of this month, if we haven’t heard back from community members using the service by the end of this week. At present we haven’t heard from anyone who wants to keep the service ope

Re: [dns-operations] DNS attacks against FR/BE/NL resolvers of Internet access providers

2020-09-14 Thread Richard Clayton
In message <20200914131459.ga6...@nic.fr>, Stephane Bortzmeyer writes >On 1 and 2 September 2020, several French IAPs (Internet Access >Providers), including SFR and Bouygues, were "down". Their DNS >resolvers were offline, and it does indeed seem that this was the >result of an attack carried ou

[dns-operations] DNS attacks against FR/BE/NL resolvers of Internet access providers

2020-09-14 Thread Stephane Bortzmeyer
On 1 and 2 September 2020, several French IAPs (Internet Access Providers), including SFR and Bouygues, were "down". Their DNS resolvers were offline, and it does indeed seem that this was the result of an attack carried out against these resolvers. https://www.afnic.fr/en/resources/blog/about-the

Re: [dns-operations] random numbers

2020-09-14 Thread Stephane Bortzmeyer
On Thu, Sep 10, 2020 at 06:32:59PM -0700, Paul Vixie wrote a message of 56 lines which said: > < that will not cause fragmentation. The value recommended here is 1232 > bytes.>> > > this number is random, I don't think it is random. It is 1280 (RFC 8200, section 5) minus 40 (RFC 8200, sectio

Re: [dns-operations] Flag Day’s Resolver Tester: reports all my netblocks wrong

2020-09-14 Thread Jerry Lundström
Hi Pirawat, On 2020-09-11 16:23, Pirawat WATANAPONGSE wrote: > The new Resolver Tester for this year Flag Day reports all my netblocks > wrong [Reference: > https://drive.google.com/file/d/1gIf-BFXpBBu7Y03VbJbtpc5p2REOkoLC/view?usp=sharing > ] The screenshot is from Check My DNS, which is not rel

Re: [dns-operations] How widely implemented are different DNSSEC algorithms?

2020-09-14 Thread Moritz Muller via dns-operations
--- Begin Message --- We publish some numbers on .nl on our stats website: https://stats.sidnlabs.nl/en/dnssec.html#algorithms%20used - Moritz > On 14 Sep 2020, at 06:59, Arsen STASIC wrote: > > * John Levine [2020-09-11 14:29 (-0400)]: >> Are there any published numbers estimating how well t