[dns-operations] Name servers returning incorrectly truncated UDP responses

Jaap Akkerhuis jaap at NLnetLabs.nl
Sat Jul 30 08:46:36 UTC 2022


 Puneet Sood via dns-operations writes:

 > While the affected operators are spread around the world, the similarity of
 > the bad response across operators appears to suggest the DNS software may
 > be from the same or closely related source. These servers do not respond to
 > a version.bind query.
 >
 > Have you seen similar bad responses? Do you have an idea of the provenance
 > of this software?

Fingerprinting with fpdns gives:

fpdns e.ns.email.sonyentertainmentnetwork.com
fingerprint (e.ns.email.sonyentertainmentnetwork.com, 207.251.96.133): DJ Bernstein TinyDNS 1.05 [Old Rules]

	jaap




More information about the dns-operations mailing list