Re: DNS Reliability

2013-09-13 Thread Marco Davids (Prive)
On 09/13/13 03:53, Larry Sheldon wrote:
 On 9/12/2013 3:25 PM, Phil Fagan wrote:
 Its a good point about the anycast; 99.999% should be expected.
 A small choice of attitude-reflecting language.

 I expect 100.000%

 I'll accept 99.999% or better.


It depends... define 'lost queries'. For example; is RRL included here
or not (sometimes you want to deliberatly 'loose' queries).

--
Marco



Re: Big day for IPv6 - 1% native penetration

2012-11-26 Thread Marco Davids (Prive)
On 11/26/12 15:53, sth...@nethelp.no wrote:
 Again, where're the compelling IPv6-only content/apps/services?

 To answer your rhetorical question, http://www.kame.net/ has a dancing
 kame.  To my knowledge, that's the most compelling IPv6-only content.
 Don't forget http://loopsofzen.co.uk/ - that's definitely the most
 compelling IPv6-only content I've found.


http:///thepiratebay/.se./ipv6/.sixxs.org was popular for a while, when
major ISP's in the Netherlands where forced to block 'The Piratebay'
overhere in the Netherlands, I believe...

--
Marco




DNS issues with tools.ietf.org

2012-04-04 Thread Marco Davids (Prive)

Hi,

Something seems wrong with the DNS of 'tools.ietf.org'.

Can anyone conform?

--
Marco



Re: DNS issues with tools.ietf.org

2012-04-04 Thread Marco Davids (Prive)

On Wed, 4 Apr 2012, Matt Ryanczak wrote:


On 04/04/2012 04:28 PM, Craig Van Tassle wrote:

It works for me.


works for me too but there do appear to be some problems:


And what about this:

dig tools.ietf.org @merlot.levkowetz.com.

;  DiG 9.7.0-P1  tools.ietf.org @merlot.levkowetz.com.
;; global options: +cmd
;; Got answer:
;; -HEADER- opcode: QUERY, status: SERVFAIL, id: 33101




Re: DNS issues with tools.ietf.org

2012-04-04 Thread Marco Davids (Prive)

On Wed, 4 Apr 2012, Stephane Bortzmeyer wrote:


And what about this:


But two name servers, gamay and shiraz still work. So the domain
works


Actually it didn't resolve at all. Even an 'unbound-host -v -d' 
failed.


But... things seem to be working fine again, at least to the extend that I 
can reach the website.


--
Marco







RE: root zone stats

2012-03-12 Thread Marco Davids (Prive)

On Sun, 11 Mar 2012, Frank Bulk wrote:


Some nice info here, too: http://bgp.he.net/report/dns


Nice, but... not 100% up to date?

.cw seems to be missing.

--
Marco



Frank

-Original Message-
From: Doug Barton [mailto:do...@dougbarton.us]
Sent: Saturday, March 10, 2012 5:14 PM
Cc: APNIC Mailing List; nanog@nanog.org
Subject: root zone stats

Since there was a question about this, some numbers:

Serial: 2012031001

Statistics
==
Number of root servers:   13
Roots with IPv6 glue:  9

Number of gTLDs:  22
Number of ccTLDs:249
Number of IDN TLDs:   42
Total number of TLDs:313

Number of IPv4 hosts:   1176
Number of IPv4 addresses:   1145

Number of IPv6 hosts:427
Number of IPv6 addresses:412
TLDs with IPv6 glue: 258

Total name server hosts:1177
Total NS addresses: 1557

Number of DS records:141
Number of TLDs with DS:   85


Enjoy,

Doug

--
   If you're never wrong, you're not trying hard enough









RE: root zone stats

2012-03-12 Thread Marco Davids (Prive)

On Mon, 12 Mar 2012, Marco Davids (Prive) wrote:


Some nice info here, too: http://bgp.he.net/report/dns



.cw seems to be missing.


Oops, it isn't... it's just not wehere I expected it.

--
Marco




Paging OpenDNS

2012-01-16 Thread Marco Davids (Prive)

Hi,

Can someone responsible for 'malware-bl...@opendns.com' please contact me 
offline?


Thank you.

--
Marco




DNSSEC on the resolver-side?

2011-03-23 Thread Marco Davids (Prive)

Hi,

I wonder... How many people here have activated DNSSEC validation on their 
resolvers?


Please let me know off-list when the page below results in a green tick:

http://dnssectest.sidn.nl/

Additional details are welcome, like:

- The IP-address of the resolver(s) you used (if you know)
- Whether this is an 'official' resolver at an ISP or not
- You current IP-address, or the ISP you are at (http://ip.sidn.nl might be 
helpful).


Maybe some of you DNS-gurus are even able to tell why DNSSEC validation failed, 
even when using DNSSEC-enabled resolvers. For example because of some 
old-school DNS-forwarder in your ADSL modem or something. That would be 
great information also.


The reason for this post is just for me to get a rough understanding of the 
level of DNSSEC adoption on the resolver-side and the problems that 
might still exist with DNSSEC validation.


The NANOG wiki (http://nanog.cluepon.net) has nothing 
about DNSSEC yet. Would it be an idea to add something about DNSSEC? I am more 
than willing to do the kick-off for that.


Regards,

--
Marco



Looking for 'websitewelcome.com' contact

2009-01-09 Thread Marco Davids (Prive)
Hi,

Could anyone responsible for ns[12].websitewelcome.com please contact me
off-list?

Or, can anyone give me a good pointer on how to contact the technical
staff of websitewelcome.com?

Thank you so much,

--
Marco Davids