[dns-operations] DNSimple under attack?

2014-12-01 Thread Ken Peng
Their website can't be reachable from my end. And one of my domains with them can't be resolved. Thanks. ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list h

Re: [dns-operations] ccTLD operators

2014-11-26 Thread Ken Peng
There are some people in the list,such as from denic, nic.fr, cnnic etc. Good evening.​ I am trying to get in touch with ccTLD operators across the world , to ask several questions regarding their operations. Can you please contact me off-list if you are able to help me ? __

Re: [dns-operations] The Largest Cyber Attack In History Has Been Hitting Hong Kong Sites

2014-11-24 Thread Ken Peng
The obvious suspect behind the attacks is the Chinese government // This is just shame. Don't we have the rules to stop them? From the article: “There’s no technical solution that Cloudflare can create to solve this problem unless we re-architect the Internet.” I just love this kind of thin

Re: [dns-operations] RBL alert: impending sh*tshow for rbl.orbitrbl.com

2014-10-27 Thread Ken Peng
zoneedit was once owned by dotster, the mother-company of domain.com and mydomain.com. is it? As some of you may know, we recently took over ZoneEdit.com and it's customer base. ___ dns-operations mailing list dns-operations@lists.dns-oarc.net ht

Re: [dns-operations] Virgin Media (AS5089)

2014-08-21 Thread Ken Peng
Can you talk what's the secret? :P Anyone from Virgin Media that is on this list mind sending me an email offline? I'd be interested to see one, too: an OFFLINE email... ;-> ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://

Re: [dns-operations] Hello from the dns.watch project!

2014-08-17 Thread Ken Peng
Do you know what're the special skills for running an open resolver server? If running it with BIND, just change the "recursion" option to "yes" and it will resolve all the clients' domain request. So besides the two items below: #1, setup anycast networks #2, build anti-ddos system what're t

Re: [dns-operations] Hello from the dns.watch project!

2014-08-17 Thread Ken Peng
Thanks for the info. I have two another questions, 1st, does the .watch tld owned by your company fully? 2nd, do you provide the security filter as OpenDNS does? 在 2014-08-16 06:34,German Hoeffner 写道: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello everyone! First of all, a short int

Re: [dns-operations] rdata out of range

2014-04-30 Thread Ken Peng
ther a lot. Cheers, Chris On 30 April 2014 11:03, Ken Peng mailto:kp...@terra.com>> wrote: Hi, I update the SOA with nsupdate but got the error: [20140430175917] 30-Apr-2014 17:59:17.384 dns_rdata_fromtext: buffer-0xb61c2bbc:1: near '800099': out of range

[dns-operations] rdata out of range

2014-04-30 Thread Ken Peng
Hi, I update the SOA with nsupdate but got the error: [20140430175917] 30-Apr-2014 17:59:17.384 dns_rdata_fromtext: buffer-0xb61c2bbc:1: near '800099': out of range invalid rdata format: out of range syntax error 800099 is the serial I setup. The server is linux 32bit OS. nameserver is

Re: [dns-operations] most of root NS and com's NS fail from here

2014-04-29 Thread Ken Peng
Thanks for all your helps. The dig for version.bind and hostname.bind sometime works, sometime not. as you see: pyh@dwdns153:~$ dig txt chaos version.bind @h.root-servers.net ; <<>> DiG 9.6.1-P2 <<>> txt chaos version.bind @h.root-servers.net ;; global options: +cmd ;; Got answer: ;; ->>HEADER<

Re: [dns-operations] most of root NS and com's NS fail from here

2014-04-29 Thread Ken Peng
于 2014-4-29 17:27, Dave Warren 写道: Beyond what the others said, IPv4 or v6? I vaguely recall some global routing problems on IPv6 with at least a couple root server... This might complicate matters. All our servers don't have IPv6 configured. So the queries were going with v4. _

Re: [dns-operations] most of root NS and com's NS fail from here

2014-04-29 Thread Ken Peng
于 2014-4-29 15:22, Steven Carr 写道: More than likely traffic was blocked/filtered by the Chinese firewall. Take a packet capture and see what happens when you do a single query, do you get a response at all, do you get any TCP reset packets? Also post the full dig output. The queries were just t

Re: [dns-operations] most of root NS and com's NS fail from here

2014-04-29 Thread Ken Peng
于 2014-4-29 12:21, David Conrad 写道: Ken, On Apr 28, 2014, at 7:43 PM, Ken Peng wrote: Recent days I found most of the root nameservers, and com/net's nameservers can't work from here. When accessing to them I always got timeout. If you're querying from inside China, probably

[dns-operations] most of root NS and com's NS fail from here

2014-04-28 Thread Ken Peng
Hi, Recent days I found most of the root nameservers, and com/net's nameservers can't work from here. When accessing to them I always got timeout. These are the test info for root NS: $ dig . ns +short |sort |while read LINE;do if dig . soa @$LINE >/dev/null 2>&1;then echo $LINE OK;else echo $LI

[dns-operations] about the rName with dot

2014-04-28 Thread Ken Peng
Hi, For the rName in SOA, when the username has a dot,shall it be converted to "\."? For example, user's email is john.sm...@rackspace.com, so it appears in SOA as john\.smith.rackspace.com, is it? Is there a live example for this kind of rName? Thanks.

Re: [dns-operations] bind + client-subnet

2013-08-13 Thread Ken Peng
On 2013-8-13 18:30, Jared Mauch wrote: I'm not sure how accurate this really is, but: http://www.cdnplanet.com/blog/which-cdns-support-edns-client-subnet/ Basically, it helps pass the client IP upstream so the CDN can make a better guess to which cluster to direct you to, instead of the query-

Re: [dns-operations] bind + client-subnet

2013-08-12 Thread Ken Peng
On 2013-8-13 11:57, Jared Mauch wrote: Does anyone know if BIND supports the client-subnet option, or do I need to seek another recursive resolver for this? it does seem there are some patches, but I'm not sure if this is something others have experimented with, e.g.: http://wilmer.gaa.st/edn

Re: [dns-operations] what type of attack is this?

2013-08-09 Thread Ken Peng
On 2013-8-9 16:09, Steven Carr wrote: Is there a reason why your nameservers are allowing those IP addresses to query you? (and thus query waig8.com) i.e. are you supposed to be running an open resolver on those nameservers? Hi, My nameservers are auth-only. that means we are the auth-servers