[dns-operations] Shameless plug for our Zonecheck software (Was: af.mil DNS issue

[John Payne]

On Jun 30, 2006, at 10:25 PM, Joseph S D Yao wrote:

> On Fri, Jun 30, 2006 at 05:20:03PM -0400, John Payne wrote:
> ...
>> If ISC or someone else runs it, *please* consider the settings very
>> carefully.
>>
>> Just trying a couple of domains:
>>
>> - Not running accepting TCP queries is marked as an failure
>
>
> Well?  It is!  Name servers should be able to accept both.  Just in
> case, you know.

"Just in case"   I'd rather not have an unnecessary DoS vector open  
on my servers if I don't need it.... and taking the experience of a  
company that does a LOT of DNS hits, anyone only doing TCP is in a  
extremely insignificant minority.


>> - Having 2 (out of 8) nameservers using the same address is marked as
>> an error
>
>
> And it isn't for what reason?

It should not be a FATAL error.


>> - unable to find nameservers for bl.spamcop.net  (funny, I can just
>> fine)
>
>
> So, if the specified name server can't, and it's been found to be
> recursive on other queries, whyu is this not an error?

Huh?