[161684] in North American Network Operators' Group
Re: Open Resolver Problems
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Mon Mar 25 11:27:05 2013
To: Jared Mauch <jared@puck.nether.net>
In-Reply-To: Your message of "Mon, 25 Mar 2013 10:22:08 -0400."
<1BCE4663-EEB4-44EB-997F-906B232F41A1@puck.nether.net>
From: Valdis.Kletnieks@vt.edu
Date: Mon, 25 Mar 2013 11:25:59 -0400
Cc: North American Operators' Group <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--==_Exmh_1364225159_2609P
Content-Type: text/plain; charset=us-ascii
On Mon, 25 Mar 2013 10:22:08 -0400, Jared Mauch said:
> Some basic stats:
>
> 27 million resolvers existed as of this dataset collection
>
> only 2.1 million of them were "closed".
>
> We have a lot to do to close the hosts, please do what you can to help.
What's the current BCP on how to deal with mobile devices that hard-code
your resolvers in their equivalent of /etc/resolv.conf (often because the
owner of the device trusts their emnployers/whatever resolver more than they
trust the DNS server that the hotel DHCP pointed them at)?
(And yes, I *know* that "point at your employers DNS" works against a
threat model of "local provider is an idiot" and fails against "local
provider is willing to spoof replies from other DNS servers")
--==_Exmh_1364225159_2609P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iQIVAwUBUVBshwdmEQWDXROgAQIm7Q/+O3N8ozx8MSp3EINXrShf4wm/I4JU2CE9
rYIDXT6IEpmW4NoEgLJdSfu8BebhJObhtMiTPgR65KwrNUnmGnRDloPc7yu9zfhu
yhDmlqwHI7NqEL8dJ5+/q60PHUOkejnU68wLeTP61X97gGkCQEg/JHY7e/mCrZ++
Y+TBF4TwBL/OjGpOLyVrr2uYlJjZ/H999foWtYA4QQaLornnPcZ+ZtBaOLwWLyEw
FfbEQPfjxhp3W2EnTH9bUjuFVZ6EBdqRooNfJ4s6wFCTEGDXXjAwjGZv3GdtChDy
+yqXPuat/BuhPdKrIOVFlKGaPA69QRlnjST1jqyY0mpai+hRq/hH9DvgUB8LAkG7
8gNPDUogFv33PtotCZeqXbuJkiiDxZ6uaOYq22kncOhO47+2ORHBfJoRUYuH9GvM
v7Dt4zT8cfvKppXty6n8xgG96mN8fOm9QYI3Aqq/pozXtSvlabOcVGhW/V0rXLBc
2ASpxynpTx3w8DW0u26YdkJ8rtKCCAAFeHdwf6cztnI664WpyZcKQ2Q2A24bQGBK
rn6hhM6awB/fex5e18i2tYbgLW3VIs5rTaXCGVizb2swTj8Om7ru8f++QcZU/JGg
g//SChskvkGR16+Iw80RQqTX+mNXew6KBkYncU4JVftR+xfOZTZbbW4PjtHTfCXP
ifcnljFsx+E=
=KWCD
-----END PGP SIGNATURE-----
--==_Exmh_1364225159_2609P--
