[dns-operations] Shameless plug for our Zonecheck software (Was: af.mil DNS issue

John Payne john at sackheads.org
Sat Jul 1 17:13:03 UTC 2006

On Jun 30, 2006, at 10:25 PM, Joseph S D Yao wrote:

> On Fri, Jun 30, 2006 at 05:20:03PM -0400, John Payne wrote:
> ...
>> If ISC or someone else runs it, *please* consider the settings very
>> carefully.
>> Just trying a couple of domains:
>> - Not running accepting TCP queries is marked as an failure
> Well?  It is!  Name servers should be able to accept both.  Just in
> case, you know.

"Just in case"   I'd rather not have an unnecessary DoS vector open  
on my servers if I don't need it.... and taking the experience of a  
company that does a LOT of DNS hits, anyone only doing TCP is in a  
extremely insignificant minority.

>> - Having 2 (out of 8) nameservers using the same address is marked as
>> an error
> And it isn't for what reason?

It should not be a FATAL error.

>> - unable to find nameservers for bl.spamcop.net  (funny, I can just
>> fine)
> So, if the specified name server can't, and it's been found to be
> recursive on other queries, whyu is this not an error?


More information about the dns-operations mailing list