Worldnic does TCP-before-UDP DNS tricks, breaking powerdns recursor and those w/o TCP connectivity

2005-07-06 Thread bert hubert
Hi Nanog people, The PowerDNS recursor has hit a snag resolving www.kde-look.org. It appears Worldnic has implemented 'TCP-before-UDP' on ns{9,10}.worldnic.com, whereby it sends out answers with the truncated bit set, and without an actual answer. Once the client has re-asked the query over TCP,

Re: Above.net problems ??

2003-11-26 Thread bert hubert
On Wed, Nov 26, 2003 at 11:31:32AM -0700, Duane Wessels wrote: In my simulations with 100% packet loss, DNS caches running BIND8, dnscache, W2000, and W2003 all amplified the user's query rates. Only BIND9 attenuated. pdns_recursor also throttles queries, see

Re: VeriSign SMTP reject server updated

2003-09-20 Thread bert hubert
On Sat, Sep 20, 2003 at 02:16:34PM -0400, Dave Stewart wrote: implementation using Postfix that should address many of the concerns we've heard. Like snubby, this server rejects any mail sent to it (by returning 550 in response to any number of RCPT TO commands). ICANN has requested that

Re: Root Server Operators (Re: What *are* they smoking?)

2003-09-17 Thread bert hubert
On Wed, Sep 17, 2003 at 05:13:45AM +, Paul Vixie wrote: therefore i believe that while they may have to change the A RR from time to time according to their transit contracts, verisign won't insert an NS RR into the sitefinder redirection. if they do, and if bind's user community still

Re: Root Server Operators (Re: What *are* they smoking?)

2003-09-17 Thread bert hubert
On Wed, Sep 17, 2003 at 03:35:31PM +0200, Stefan Baltus wrote: On Wed, Sep 17, 2003 at 09:27:13AM -0400, Todd Vierling wrote: On Wed, 17 Sep 2003, Paul Vixie wrote: : Anyone have a magic named.conf incantation to counter the verisign : braindamage? : zone com { type delegation-only; };

Re: Not the best solution, but it takes VeriSign out of the loop

2003-09-16 Thread bert hubert
On Tue, Sep 16, 2003 at 11:07:41AM -0700, Mike Damm wrote: Who's up for creating a network of new gTLD servers? I'm sure it wouldn't be too hard to reconstruct 90% of the com/net zones from publicly available data (http://www.deleteddomains.com/newlist.shtml?cid=11673-11084 would be a

PowerDNS open source since 25th of November

2003-01-04 Thread bert hubert
I humbly grovelingly like to point out here that PowerDNS, the database (and ldap, perl, 'pipe' and bind zonefile) driven nameserver is open source. I think it may be useful for many operators here, especially as PDNS is well suited for 'BGP DNS' trickery. It is GPL licensed and is BIND

Re: Dutch translation needed

2003-01-03 Thread bert hubert
On Wed, Jan 01, 2003 at 05:32:36PM -0700, James-lists wrote: I am not getting through to speed.planet.nl in English, can anyone give me a decent translation of in Dutch (The Netherlands): Everybody here speaks English. If they are ignoring you, they will ignore you in Dutch too. Regards,

Re: COM/NET informational message

2003-01-03 Thread bert hubert
On Fri, Jan 03, 2003 at 07:15:43PM +, E.B. Dreger wrote: Yes, comparisons are case-insensitive. So what? strcasecmp() works on ASCII strings. Now it must work on new encoding x. Why not let new encoding x be UTF-8, something programmers should support already? Maybe MS-style Unicode

Re: COM/NET informational message

2003-01-03 Thread bert hubert
On Fri, Jan 03, 2003 at 12:26:05PM -0800, just me wrote: Am I the only one that finds this perversion of the DNS protocol abhorrent and scary? This is straight up hijacking. I find Microsoft blatantly sending out UTF-8 and 'another local encoding' to nameservers interesting too. The real

Re: Selective DNS replies

2002-05-26 Thread bert hubert
On Wed, Apr 24, 2002 at 08:55:15PM +0100, Avleen Vig wrote: This subject has probably been talked to death, so I apologise in advance for bringing it up! Is there any DNS server currently availible that can reply to DNS lookups based on the source IP address?

Re: proposed government regulation of .za namespace

2002-05-26 Thread bert hubert
On Sat, May 25, 2002 at 09:04:40AM -0700, Randy Bush wrote: ISC has had very little in the way of problems as a .ZA slave its the ac.za and co.za messes Try registering a domain with co.za if any of your nameservers sits on an RFC2317 classlessly delegated reverse, and where your

connections to SOA mname?

2002-04-20 Thread bert hubert
of the zone' perhaps? It has been too sporadic to investigate properly. Regards, bert hubert -- http://www.PowerDNS.com Versatile DNS Software Services http://www.tk the dot in .tk http://lartc.org Linux Advanced Routing Traffic Control HOWTO

Re: is your host or dhcp server sending dns dynamic updates for rfc1918?

2002-04-19 Thread bert hubert
On Thu, Apr 18, 2002 at 04:57:59PM -0700, Paul Vixie wrote: according to http://root-servers.org/, dns transactions concerning rfc1918 address space are now being served by an anycast device near you (no matter who you might be, or where.) there will eventually be official statistics, but

Re: is your host or dhcp server sending dns dynamic updates for rfc1918?

2002-04-19 Thread bert hubert
from non-1918 ip source addresses. We find that updates in the forward zones are a great way of tracking laptops, btw, as nobody ever changes the 'domain' or whatever it is called in Windows. So you see these updates coming in from everywhere the laptop goes. Regards, bert hubert -- http