[96805] in North American Network Operators' Group
Re: Interesting new dns failures
daemon@ATHENA.MIT.EDU (Chris L. Morrow)
Fri May 25 16:33:09 2007
Date: Fri, 25 May 2007 20:31:59 +0000 (GMT)
From: "Chris L. Morrow" <christopher.morrow@verizonbusiness.com>
In-reply-to: <15470.1180124622@turing-police.cc.vt.edu>
To: Valdis.Kletnieks@vt.edu
Cc: surfer@mauigateway.com, nanog@merit.edu
Errors-To: owner-nanog@merit.edu
On Fri, 25 May 2007 Valdis.Kletnieks@vt.edu wrote:
> On Fri, 25 May 2007 12:08:44 PDT, Scott Weeks said:
> > --------------johnl@iecc.com wrote:--------------------
> > > the bits of governments that deal with online crime, spam, etc.,
> > > I can report that pretty much all of the countries that matter
> > > realize there's a problem, and a lot of them have passed or will
> > > pass laws whether we like it or not. So it behooves us to engage
> > > them and help them pass better rather than worse laws.
> > ----------------------------------------------------------
>
> > Which countries are "pretty much all of the countries that matter"? Do you
> > have a list or is this just 'something you're sure of'?
>
> A lot of the more nefarious uses of the DNS are there precisely because the
> actual country *doesn't* matter, and as a result the TLD is run by somebody
> who is asleep at the wheel or worse. For instance, there appears to be a
> '*.cm' wildcard in place, and several "flag of convenience" TLDs with a high
cameroon outsourced their dns infrastructure management to someone, that
contract includes a "we can answer X for all queries that would return
NXDOMAIN'" ... that's not 'asleep at the wheel' so much as 'not a good
idea' (except for click revenue I suppose). This is different from .cx? or
.tv how?
> ratio of users that aren't actually associated with the country...