[dns-operations] What is the most pressing need for DNS these days?

[Peter Dambier]

Brad Knowles wrote:
> 
> 	I want to help, I really do.  I just question the wisdom of 
> continuing to throw good money after bad, especially when we've been 
> shown just how bad it really is.

So do I.

> 
> 	There comes a time when a complete revolution is what is 
> required, as opposed to continuing to play nice with the tyrants and 
> the fascists.
> 

The time is now, and here it is:

www.cesidianroot.com

China has found its own way to go.
Turkey has found its own way to go.
The arabs have found their own way to go.

There have been many alternative roots comming and going.
Some of them are still alive.

First step) Balkanisation

Second step) Cooperation

ICANN was never good at cooperation.


There used to be a HOLY hostfile and people like John Palmer dared to
have their own. Today everybody has his own hostfile and nobody cares.

I guess the future will be for everybody to have his own personal
root-server. I dont want my gouvernement to do that job for me.

Of course we must find a means to exchange informaton so we can
communicate. One means is to look directly into the authoritative
nameservers of the toplevel domains.

Just an interseting log what happens when you try, taking the
ICANNed rootfile as reference:

host_error("bh.","sv10.batelco.com.bh.","Host not found").
host_error("bw.","daisy.ee.und.ac.za.","Host not found").
host_error("gm.","ns2.nic.gm.","Host not found").
host_error("id.","ns2.id.","Host not found").
host_error("ps.","dns3.gov.ps.","No data").
host_error("so.","mercury.ml.org.","Host not found").
host_error("tl.","ns.tp.timor-leste.net.nz.","Try again").

I took ns.tp.timor-leste.net.nz for an example.

No way to find it using DNS. Try for yourself.
Google did find their ip, but that host did not answer DNS.

Except for a handfull of obedient TLDs the rootfile does not
look promising.

error("mm.","ns-mm.ripe.net.","193.0.12.151","no response").
error("mm.","ns.net.mm.","202.153.125.17","no response").
error("mm.","ns0.mpt.net.mm.","203.81.64.20","no soa").

; <<>> DiG 9.1.3 <<>> -t any mm.
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49606
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;mm.                            IN      ANY

;; ANSWER SECTION:
mm.                     56005   IN      NS      NS0.MPT.NET.mm.
mm.                     56005   IN      NS      NS-MM.RIPE.NET.
mm.                     56005   IN      NS      NS.NET.mm.

;; Query time: 598 msec
;; SERVER: 192.168.208.228#53(192.168.208.228)
;; WHEN: Sat Jul  8 12:16:32 2006
;; MSG SIZE  rcvd: 91


error("et.","ns1.gip.net.","204.59.144.222","no response").
error("et.","ns2.gip.net.","204.59.1.222","no response").
error("et.","ns3.gip.net.","204.59.64.222","no response").


error("zm.","ns1.coppernet.zm.","62.56.216.9","no soa").
error("zm.","ns1.microlink.zm.","193.220.20.30","no soa").
error("zm.","ns3.zamnet.zm.","217.10.167.20","no response").
soa("zm.","2006041301","hippo.ru.ac.za.","146.231.128.1").
soa("zm.","200606200","ns1.zamnet.zm.","196.46.192.26").
soa("zm.","200606200","ns2.zamnet.zm.","196.46.192.21").


Just some examples. The ICANNed rootfile with 266 domains gives
more than 60 error messages. Not even counted, within domains I
see different soa serialnumbers.

That is one reason why ORSN does exist. I remember they
used to have their own separate databases for DE, AT and
GR, maybe others as well.


Perhaps you have heard of the Baptista vortex striking
again, sinking Public-Root and "accidently" striking
UnifiedRoot as well :)

Having their own database you could not sink ORSN or
the Cesidan Root so easyly.

Turkish ISPs have shown, they can switch roots within
two hours. They have saved their day :)

It is good to know there are alternatives and how to
switch, just in case.

Cheers,
Peter and Karin


-- 
Peter and Karin Dambier
Cesidian Root - Radice Cesidiana
Graeffstrasse 14
D-64646 Heppenheim
+49(6252)671-788 (Telekom)
+49(179)108-3978 (O2 Genion)
+49(6252)750-308 (VoIP: sipgate.de)
mail: peter at peter-dambier.de
mail: peter at echnaton.serveftp.com
http://iason.site.voila.fr/
https://sourceforge.net/projects/iason/