[dns-operations] is it worth trying to get people to stop declaring authority for '.' ?

Paul Vixie vixie at isc.org
Tue Dec 2 14:51:52 UTC 2008


i was watching the ISC SIE fast flux channel out of the corner of my eye
and noticed the following, which isn't really fast flux but triggers on
the same conditions.  the misconfiguration shown in the authority section
is usually due to someone putting a lot of data into a "zone file" without
real apex NS RRs, just one apex NS RRset at the top, for '.'.  so, domain
parking of some kind.  ever since kashpureff, no caching or stub resolver
will import this crud.  so while my first impulse was to do some whois work
and fire off some e-mail about it, my second impulse was, who cares?

does anybody still care?

[441 dg 169.254.8.255/7433] 2008-12-02 14:44:36.446033000 [00000005 0f2b4604] \
        [85.202.114.216].53 [66.250.7.154].14719 \
        dns QUERY,NOERROR,44648,qr|aa \
        1 qegqawan.cn,IN,A \
        4 qegqawan.cn,IN,A,120,89.24.124.127 \
        qegqawan.cn,IN,A,120,89.58.158.225 \
        qegqawan.cn,IN,A,120,95.24.198.121 \
        qegqawan.cn,IN,A,120,77.234.228.139 \
        4 .,IN,NS,120,ns3.idc-996-1.com \
        .,IN,NS,120,ns2.idc-996-1.com \
        .,IN,NS,120,ns1.idc-996-1.com \
        .,IN,NS,120,ns4.idc-996-1.com \
        17 ns1.idc-996-1.com,IN,A,120,77.234.228.139 \
        ns1.idc-996-1.com,IN,A,120,89.24.124.127 \
        ns1.idc-996-1.com,IN,A,120,89.58.158.225 \
        ns1.idc-996-1.com,IN,A,120,95.24.198.121 \
        ns2.idc-996-1.com,IN,A,120,95.24.198.121 \
        ns2.idc-996-1.com,IN,A,120,77.234.228.139 \
        ns2.idc-996-1.com,IN,A,120,89.24.124.127 \
        ns2.idc-996-1.com,IN,A,120,89.58.158.225 \
        ns3.idc-996-1.com,IN,A,120,89.58.158.225 \
        ns3.idc-996-1.com,IN,A,120,95.24.198.121 \
        ns3.idc-996-1.com,IN,A,120,77.234.228.139 \
        ns3.idc-996-1.com,IN,A,120,89.24.124.127 \
        ns4.idc-996-1.com,IN,A,120,89.24.124.127 \
        ns4.idc-996-1.com,IN,A,120,89.58.158.225 \
        ns4.idc-996-1.com,IN,A,120,95.24.198.121 \
        ns4.idc-996-1.com,IN,A,120,77.234.228.139 \
        .,CLASS4096,TYPE41,0,[0]



More information about the dns-operations mailing list