[dns-operations] RIPE-52 preso on DNS issues, author comments on Slashdot.

[Roy Arends]

On Apr 26, 2006, at 9:40 PM, Duane Wessels wrote:

>> So does anyone have any feelings/thoughts, etc about CoDoNS?
>
> Unfortunatley I don't have anything of substance to say on its
> architecture.  But I did notice something interesting about the
> CoDoNS server:  It automatically refreshes expired cache entries.
>
> So say, for example, you have a lot of names in your zone with very
> short TTLs, and you manage to get those names into CoDoNS caches.
> You'll get repeated queries when the TTL expires, even if no users
> request them.
>
> In my case I'm sending probes to test for open resolvers.  Each
> probe has a unique name (e.g. 21d76597bde465c1.test.$myzone)
> and a 60-second TTL.  I'm seeing a lot of repeats from places
> that fpdns calls Beehive CoDoNS.

If these places match addresses listed on http:// 
beehive.cs.cornell.edu/~ramasv/codonsstatus.html
you'd have an explicit indicator.

Roy

disclaimer, as the author of fpdns; the methodology used to determine  
implementation is done by exclusion, and thus an implicit indication.