[dns-operations] Whimsical AXFR behavior ?

Colm MacCárthaigh colm at stdlib.net
Mon Jun 24 00:03:26 UTC 2013


Another possibility is that the problem is general to all TCP queries and
that a limited number of source ports are permitted in.


On Sun, Jun 23, 2013 at 4:56 PM, Jon Lewis <jlewis at lewis.org> wrote:

> On Mon, 24 Jun 2013, Marjorie wrote:
>
>  4. Now something more puzzling, I have noticed at least one NS that
>> exhibits some sort of random behavior: it typically denies AXFR at the
>> first attempt but after repeating the request five or seven times (more or
>> less) it finally releases the zone data as requested... some days it is not
>> in a good mood: after 20 tries it still says "No !" o:) So that depends. I
>> am really wondering what makes a NS behave like that ?
>>
>
> Load-balancer + some fraction of misconfigured servers that haven't
> restricted AXFR access?
>
> ------------------------------**------------------------------**----------
>  Jon Lewis, MCP :)           |  I route
>                              |  therefore you are
> _________ http://www.lewis.org/~jlewis/**pgp<http://www.lewis.org/~jlewis/pgp>for PGP public key_________
>
> ______________________________**_________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.**net <dns-operations at lists.dns-oarc.net>
> https://lists.dns-oarc.net/**mailman/listinfo/dns-**operations<https://lists.dns-oarc.net/mailman/listinfo/dns-operations>
> dns-jobs mailing list
> https://lists.dns-oarc.net/**mailman/listinfo/dns-jobs<https://lists.dns-oarc.net/mailman/listinfo/dns-jobs>
>



-- 
Colm
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20130623/658ca9fb/attachment.html>


More information about the dns-operations mailing list