Re: [dns-operations] dnspooq

2021-02-03 Thread Frank Bulk
jne' Cc: dns-operati...@dns-oarc.net Subject: Re: [dns-operations] dnspooq Thanks, great idea! Frank -Original Message- From: Leo Vandewoestijne Sent: Wednesday, February 3, 2021 8:47 AM To: Frank Bulk Cc: dns-operati...@dns-oarc.net Subject: Re: [dns-operations] dnspooq On Mon

Re: [dns-operations] dnspooq

2021-02-03 Thread Frank Bulk
Thanks, great idea! Frank -Original Message- From: Leo Vandewoestijne Sent: Wednesday, February 3, 2021 8:47 AM To: Frank Bulk Cc: dns-operati...@dns-oarc.net Subject: Re: [dns-operations] dnspooq On Mon, 01 Feb 2021, Frank Bulk wrote: > Is there a tool that would allow me

Re: [dns-operations] dnspooq

2021-02-01 Thread Frank Bulk
Is there a tool that would allow me to identify all the DNS servers on our networks that are using dnsmasq? Frank -Original Message- From: dns-operations On Behalf Of Roy Arends Sent: Tuesday, January 19, 2021 9:53 AM To: dns-operati...@dns-oarc.net Subject: [dns-operations] dnspooq fy

[dns-operations] www.he.net returning he.net.he.net at some resolvers

2020-05-15 Thread Frank Bulk
FYI, the Hurricane Electric NOC has confirmed that some caches contain a CNAME to he.net.he.net and communicated that they expect that to clear by sometime tomorrow. # dig www.he.net @1.1.1.1 +short he.net.he.net. Frank ___ dns-operations mailing

Re: [dns-operations] Verifying that a recursor is performing DNSSec validation

2015-07-25 Thread Frank Bulk
approved. I'd appreciate your similar feedback. Frank -Original Message- From: Wessels, Duane [mailto:dwess...@verisign.com] Sent: Friday, July 24, 2015 4:42 PM To: Frank Bulk Cc: dns-operati...@dns-oarc.net Subject: Re: [dns-operations] Verifying that a recursor is performing D

Re: [dns-operations] Verifying that a recursor is performing DNSSec validation

2015-07-21 Thread Frank Bulk
, 2015 10:03 AM To: Frank Bulk Cc: 'Livingood, Jason' ; dns-operati...@dns-oarc.net Subject: Re: [dns-operations] Verifying that a recursor is performing DNSSec validation On Tue, 21 Jul 2015 08:21:16 -0500 Frank wrote: FB> Thanks. I found three on the Internet that are set up

Re: [dns-operations] Verifying that a recursor is performing DNSSec validation

2015-07-21 Thread Frank Bulk
iving...@cable.comcast.com] Sent: Tuesday, July 21, 2015 3:33 AM To: Frank Bulk ; dns-operati...@dns-oarc.net Subject: Re: [dns-operations] Verifying that a recursor is performing DNSSec validation And for one that is always deliberately broken, for testing: www.dnssec-failed.org On 7/20/15, 10:13 PM, "

Re: [dns-operations] Verifying that a recursor is performing DNSSec validation

2015-07-20 Thread Frank Bulk
-operations-boun...@dns-oarc.net] On Behalf Of Frank Bulk Sent: Friday, July 17, 2015 12:51 AM To: dns-operati...@dns-oarc.net Subject: Re: [dns-operations] Verifying that a recursor is performing DNSSec validation I've completed writing the first iteration of a NAGIOS-oriented Perl script that

Re: [dns-operations] Verifying that a recursor is performing DNSSec validation

2015-07-16 Thread Frank Bulk
riginal Message- From: dns-operations [mailto:dns-operations-boun...@dns-oarc.net] On Behalf Of Frank Bulk Sent: Tuesday, July 14, 2015 12:08 AM To: dns-operati...@dns-oarc.net Subject: [dns-operations] Verifying that a recursor is performing DNSSec validation Is there an existing tool, ideally a NAGI

[dns-operations] Verifying that a recursor is performing DNSSec validation

2015-07-13 Thread Frank Bulk
ay/MM/How+to+test+DNSSEC+validation I'd rather not re-invent the wheel if it already exists. Regards, Frank Bulk ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jo

[dns-operations] Peak qps/subscriber rule of thumb for residential ISP networks

2014-12-06 Thread Frank Bulk
I pretty regularly see stats for peak traffic/subscriber in ISP networks (currently around 300 to 600 kbps/subscriber for most residential networks in North America), but I've not seen a rule of thumb for peak qps/subscriber in residential ISP networks. What's a typical peak qps/subscriber in a re

Re: [dns-operations] Need contacts

2014-07-12 Thread Frank Bulk
A week later we now better understand what this was about. =) Frank -Original Message- From: dns-operations [mailto:dns-operations-boun...@dns-oarc.net] On Behalf Of Dan Durrer Sent: Wednesday, July 02, 2014 12:46 PM To: dns-operati...@dns-oarc.net Subject: [dns-operations] Need contacts

Re: [dns-operations] AAAA record for c.root-servers.net

2014-04-01 Thread Frank Bulk
While HE doesn't stand out on the high end, Cogent does show up on the low end: http://en.wikipedia.org/wiki/Comparison_of_IPv6_support_by_major_transit_pro viders Frank -Original Message- From: dns-operations-boun...@lists.dns-oarc.net [mailto:dns-operations-boun...@lists.dns-oarc.net] O

[dns-operations] Looking for Verizon Wireless DNS contact

2014-02-08 Thread Frank Bulk
If VZW, or someone who knows an appropriate contact there, can reach out to me about DNS matter, it would be much appreciated. Emails to the addresses listed in their SOA (dnsad...@nw.verizonwireless.com) and WHOIS record (doma...@verizonwireless.com) bounce immediately. Thanks, Frank ___

Re: [dns-operations] .US problems?

2013-08-15 Thread Frank Bulk
Same mentioned on outages listserv: https://puck.nether.net/pipermail/outages/2013-August/005883.html Frank -Original Message- From: dns-operations-boun...@lists.dns-oarc.net [mailto:dns-operations-boun...@lists.dns-oarc.net] On Behalf Of wbr...@e1b.org Sent: Thursday, August 15, 2013 2:4

Re: [dns-operations] .gov failing dnssec-validation

2013-08-14 Thread Frank Bulk
This was also brought up on the outages list, too: https://puck.nether.net/pipermail/outages/2013-August/005853.html Frank -Original Message- From: dns-operations-boun...@lists.dns-oarc.net [mailto:dns-operations-boun...@lists.dns-oarc.net] On Behalf Of Casper Gielen Sent: Wednesday, Augu

[dns-operations] TelstraClear DNS server issue

2013-02-15 Thread Frank Bulk
http://www.stuff.co.nz/technology/digital-living/8293896/TelstraClear-intern et-outage Wondering if anyone knows what happened here. It's seems a bit odd that a larger service provider could lose all their DNS servers. We hand out our customers a heterogeneous set of caching resolvers on differe

Re: [dns-operations] getting .CW recognised in the Google ccTLD tables/databases ...

2013-01-21 Thread Frank Bulk
My point is that ccTLDs don't necessarily carry the same financial resources as .bank. Frank -Original Message- From: Rick Wesson [mailto:r...@support-intelligence.com] Sent: Sunday, January 20, 2013 10:01 PM To: Frank Bulk Cc: Doug Barton; dns-operati...@mail.dns-oarc.net Subjec

Re: [dns-operations] getting .CW recognised in the Google ccTLD tables/databases ...

2013-01-20 Thread Frank Bulk
Except that with the next round of new TLDs there will be a commercial (financial) interest for the new TLD to be fully and widely usable. Frank -Original Message- From: dns-operations-boun...@lists.dns-oarc.net [mailto:dns-operations-boun...@lists.dns-oarc.net] On Behalf Of Doug Barton S

Re: [dns-operations] responding to spoofed ANY queries

2013-01-16 Thread Frank Bulk
Perhaps the ratio could be a dynamic whitelist -- if it's 1.5 or less, then allow the response to go out. Frank -Original Message- From: dns-operations-boun...@lists.dns-oarc.net [mailto:dns-operations-boun...@lists.dns-oarc.net] On Behalf Of Vernon Schryver Sent: Sunday, January 13, 2013

Re: [dns-operations] responding to spoofed ANY queries

2013-01-12 Thread Frank Bulk
If the problem is amplification, why not only perform RRL on only those DNS communications exchanges that have certain amplification factor (i.e. 1.5). Frank -Original Message- From: dns-operations-boun...@lists.dns-oarc.net [mailto:dns-operations-boun...@lists.dns-oarc.net] On Behalf Of

Re: [dns-operations] AT&T DNS Cache Poisoning?

2012-10-26 Thread Frank Bulk
As I pointed out on outages, it's not just AT&T's recursive DNS servers, its others as well. This link queries 15 DNS servers and show at least three DNS servers that point to the "incorrect" A record of 208.91.197.132. http://www.mob.net/~ted/tools/dns.php3?domain=www.ben.edu And ben.edu's se

Re: [dns-operations] FW: [outages] NIST.gov

2012-07-02 Thread Frank Bulk
I checked this morning and they're now working. Frank -Original Message- From: Richard Lamb [mailto:richard.l...@icann.org] Sent: Sunday, July 01, 2012 4:11 PM To: Frank Bulk; dns-operati...@mail.dns-oarc.net Subject: RE: [dns-operations] FW: [outages] NIST.gov Yep. Saw it sta

[dns-operations] FW: [outages] NIST.gov

2012-07-01 Thread Frank Bulk
FYI, reported on the outages listserv. Frank From: outages-boun...@outages.org [mailto:outages-boun...@outages.org] On Behalf Of Bugs Sent: Sunday, July 01, 2012 11:02 AM To: outa...@outages.org Subject: [outages] NIST.gov Hi, Anyone else having problems resolving nist.gov? >From Comcast and

Re: [dns-operations] Why would an MTA issue an ANY query instead of an MX query?

2012-06-11 Thread Frank Bulk
Reminder that Cymru will be happy to daily generate a list of open DNS resolvers in your network: http://www.team-cymru.org/Services/Resolvers/ Frank -Original Message- From: dns-operations-boun...@lists.dns-oarc.net [mailto:dns-operations-boun...@lists.dns-oarc.net] On Behalf Of Kyle Cre