Re: how to check if your ISP's DNS servers are safe

2008-07-23 Thread Steven M. Bellovin 
On Tue, 22 Jul 2008 10:21:14 -0400
Perry E. Metzger [EMAIL PROTECTED] wrote:

 
 Niels Provos has a web page up with some javascript that automatically
 checks if your DNS caching server has been properly patched or not.
 
 http://www.provos.org/index.php?/pages/dnstest.html
 
 It is worth telling people to try.
 
Those who prefer command lines can try 

dig +short porttest.dns-oarc.net TXT



--Steve Bellovin, http://www.cs.columbia.edu/~smb

-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]

Re: how to check if your ISP's DNS servers are safe

2008-07-23 Thread John Denker 
On 07/23/2008 12:44 AM, Steven M. Bellovin wrote:
 Niels Provos has a web page up with some javascript that automatically
 checks if your DNS caching server has been properly patched or not.

 http://www.provos.org/index.php?/pages/dnstest.html

 It is worth telling people to try.

 Those who prefer command lines can try 
 
   dig +short porttest.dns-oarc.net TXT

Thanks, that's helpful.

Note that the command-line version accepts the @server option,
which is useful if you have to deal with a mess of primaries, 
secondaries, forwarders, et cetera:

   dig @NS1 +short porttest.dns-oarc.net TXT
   dig @NS2 +short porttest.dns-oarc.net TXT
   dig @NS3 +short porttest.dns-oarc.net TXT

-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]