[dns-operations] [Security] Glue or not glue?

Mark Andrews marka at isc.org
Wed Jun 10 23:12:53 UTC 2015


In message <86C6057B-8DF9-41A6-AF34-E9A55E9ED11B at conundrum.com>, Matthew Pounsett writes:
>
> > On Jun 10, 2015, at 16:02 , Mark E. Jeftovic <markjr at easydns.com> wrote:
> >
> >> In the (very rare) case of my name servers receiving unwanted traffic
> in this way, I've treated it as an abuse issue.  Report to abuse@ the
> organization that's doing the delegation that they're generating undated
> traffic.  So far that's worked, but I haven't yet had to email a gTLD
> registry.
> >> _______________________________________________
> >
> > It's not that rare.
>
> Didn't say it was.. just that it hasn't happened on my name servers much.
>
> > It's happened to us (more than once) and it happened
> > to DNSimple not too long ago. In those cases we've had problems getting
> > the registrar to yank the delegation. In cases like that the registry
> > often won't even talk to us.
> >
> > It should be a no brainer to have a registrar or registry do this, but
> > it isn't.
>
> Indeed.  Have you tried the abuse approach at the registry when the
> registrar won't deal with you?  What sort of response did you get (if any
> at all)?  I'm curious what registries' abuse departments would say about
> that when, technically, they're contractually bound to publish whatever a
> registrar gives them.

They are also required to follow RFC 1034 which says they can and
should pull the delegation records if that is the only way to fix
the problem.

The community has not given IANA or ICANN permission to override
RFC 1034.

> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org



More information about the dns-operations mailing list