[161715] in North American Network Operators' Group
Re: Open Resolver Problems
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Tue Mar 26 03:53:17 2013
To: Christopher Morrow <morrowc.lists@gmail.com>
In-Reply-To: Your message of "Mon, 25 Mar 2013 23:19:31 -0400."
<CAL9jLab0iOx2VU2huBXHZHVOsEJz1Rs0a7NgPcvY=v4ZTOmn-w@mail.gmail.com>
From: Valdis.Kletnieks@vt.edu
Date: Tue, 26 Mar 2013 03:51:30 -0400
Cc: North American Operators' Group <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--==_Exmh_1364284289_3451P
Content-Type: text/plain; charset=us-ascii
On Mon, 25 Mar 2013 23:19:31 -0400, Christopher Morrow said:
> > Some of us have both publicly-facing authoritative DNS, and inward
> > facing recursive servers that may be open resolvers but can't be
> > found via NS entries (so the IP addresses of those aren't exactly
> > publicly available info).
>
> 'virginia tech dns configuration' into the webcrawler and:
> https://computing.vt.edu/content/dns-addresses
Just proving my point - you didn't find the webpage that also lists
their IPv6 addresses. :)
Now explain how you find a recursive nameserver that isn't listed in an NS
entry and *hasn't* been publicized someplace that Google can find it.
> also
> ; <<>> DiG 9.7.0-P1 <<>> @198.82.247.34 www.google.com
That might, must *might* mind you, be somewhat tangentially related
to why I asked Jared what the BCP is for dealing with mobile devices
with hardcoded DNS lists. :)
(Otherwise read as "we'll be glad to fix it if somebody has a brilliant
idea on how to do so without generating more calls to the help desk than
the near-zero rate we currently get about DNS amplification issues"....)
--==_Exmh_1364284289_3451P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001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=lVzq
-----END PGP SIGNATURE-----
--==_Exmh_1364284289_3451P--
