[dns-operations] Shameless plug for our Zonecheck software (Was: af.mil DNS issue
john at sackheads.org
Sat Jul 1 17:13:03 UTC 2006
On Jun 30, 2006, at 10:25 PM, Joseph S D Yao wrote:
> On Fri, Jun 30, 2006 at 05:20:03PM -0400, John Payne wrote:
>> If ISC or someone else runs it, *please* consider the settings very
>> Just trying a couple of domains:
>> - Not running accepting TCP queries is marked as an failure
> Well? It is! Name servers should be able to accept both. Just in
> case, you know.
"Just in case" I'd rather not have an unnecessary DoS vector open
on my servers if I don't need it.... and taking the experience of a
company that does a LOT of DNS hits, anyone only doing TCP is in a
extremely insignificant minority.
>> - Having 2 (out of 8) nameservers using the same address is marked as
>> an error
> And it isn't for what reason?
It should not be a FATAL error.
>> - unable to find nameservers for bl.spamcop.net (funny, I can just
> So, if the specified name server can't, and it's been found to be
> recursive on other queries, whyu is this not an error?
More information about the dns-operations