[dns-operations] It's begun...

Peter Andreev andreev.peter at gmail.com
Tue Nov 5 17:55:59 UTC 2013


2013/11/5 Matthäus Wander <matthaeus.wander at uni-due.de>

> * Peter Andreev [2013-11-05 16:26]:
> >
> > 2013/10/31 Chris Thompson <cet1 at cam.ac.uk <mailto:cet1 at cam.ac.uk>>
> >
> >     On Oct 24 2013, I wrote:
> >
> >     [...]
> >
> >         But... the two Cyrillic gTLDs (xn--80asehdb & xn--80aswg) are a
> bit
> >
> >         broken, in that NXDOMAIN responses don't validate properly.
> >
> >
> >     and there were some followups.
> >
> >     Just to note that this has been fixed by now - the right NSEC3
> records
> >     and their signatures are being returned.
> >
> >
> > We met very similar symptoms when we were signing our zones.  BIND
> > simply didn't generate NSEC3 unless restarted.
>
> The operator of xn--80asehdb. and xn--80aswg. is using a custom-made
> name server according to their version.bind.
>

Their version.bind looks REFUSED for me. AFAIK this is the default
behaviour of all major nameserver implementations. So I'm not sure if they
use modified BIND or completely selfmade server.


>
> Regards,
> Matt
>
> --
> Universität Duisburg-Essen
> Verteilte Systeme
> Bismarckstr. 90 / BC 316
> 47057 Duisburg
>
>
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
>



-- 
Is there any problem Exterminatus cannot solve? I have not found one yet.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.dns-oarc.net/pipermail/dns-operations/attachments/20131105/8160f27c/attachment.html>


More information about the dns-operations mailing list