<html><head></head><body dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="ApplePlainTextBody"><div class="ApplePlainTextBody">I’m currently testing the handling of the last remaining DNS header<br>flag by DNS servers for the Alexa Top 1 Million sites. At this stage<br>I’m approaching 200000 sites and have a 11% misbehaviour rate where<br>the servers echo back the flag. If we ever want to use this flag in<br>the future we need to fix this issue now well before we start using<br>the flag. <br><br><span class="Apple-tab-span" style="white-space:pre"> </span>sites:192370 ok:75868 bad:9524 11.1533%<br><br>While this seems to be a lot of sites, many of them are hosted on<br>common platforms, the list of which is below. If you see a zone<br>you control can you please fix your servers to not echo back the<br>last remaining reserved DNS header flag. BIND had this issue back<br>in the 1990’s and it took 10 minutes to fix once it was reported to<br>us.<br><br>It would also be useful if TLD and similar operators could regularly<br>check for this misbehaviour and inform the zone’s owner so that their<br>servers can be fixed. The DNS Compliance tool can check the servers<br>using a recipe like this.<br><br><span class="Apple-tab-span" style="white-space:pre"> </span>dig axfr zone > file<br><span class="Apple-tab-span" style="white-space:pre"> </span>awk ‘$4 == “NS” { print $1, $5 }’ file | genreport -i zflag<br><br>Mark<br><br>1-ofd.ru. 114dns.com. 114dns.net. 50megs.com. 52dns.com.<br>aastock.net. abc.net.au. aegworldwide.com. agu.gov.br. ainia.net.<br>akadns.net. akagtm.org. akam.net. akamaistream.net. alibabadns.com.<br>alidns.com. aliyun.com. alldata.net. alliancedata.com. amobee.com.<br>anadoluajansi.net. anastasiadate.com. aoacomnet.jp. arvixeshared.com.<br>asmallorange.com. asoshared.com. asuscomm.com. atlantichealth.org.<br>aurius.sk. bac.com. bancodelapampa.com.ar. bancoentrerios.com.ar.<br>bancor.com.ar. bancosanjuan.com. bancosantacruz.com.<br>bandhanbankonline.com. bbb.org. be. beta-bank.ru. bfh.ch.<br>bgoperator.ru. biglion.ru. bitcron.com. blackrock.com.<br>blazeblaze.net. blueweb.co.kr. bnpparibas.com. bridgestone.eu.<br>cadns.ca. canaldominios.com. car-part.com. cdmon.net. cdns.cn.<br>centene.com. chan4chan.com. changhong.com. chasingsupermom.com.<br>cinfa.com. collabserv.com. comnet.ne.jp. comon.ru.<br>compraspublicas.gob.ec. convio.net. coolhuntermx.com. cpm.co.ma.<br>crefisa.com.br. cs.ucl.ac.uk. csrc.gov.cn. cwru.edu. cwspace.de.<br>cyh.com.tr. cyon.ch. darkfetishnet.com. datacredito.com.co.<br>datemyage.com. design-dw.com. dierichs.de. dlut.edu.cn. dns-diy.com.<br>dns-diy.net. dns-shop.ru. dnsbycomodo.net. dnssys.com.<br>dogustechnology.com.tr. dol.com.tr. domain.com.hk. domainquadrat.com.<br>dominios.uol.com.br. domivesta.com. domivesta.net. downloadtech.net.<br>dream-cyber.com. drf.com. dzm.hu. e-kazan.ru. e-radio.co.jp.<br>e-service.com.ve. east.net. east.net.cn. ebuyer.com. econorentas.com.<br>edu.sh.cn. eia.gov. enst.fr. entrex.de. ercot.com. eriador.sk.<br>esb.net.tr. esb.org.tr. euronet.sk. europeart.es. exohosting.cz.<br>exohosting.sk. expocentr.com. farbox.net. farmers.com.<br>farmersinsurance.com. fastdnsnetwork.com. fc2.com. finam.ru.<br>fluent.ltd.uk. foxconn.com. freehosting.com. freeservers.com.<br>frendi.ru. fubra.com. fundacionbotin.org. funknetz.at. fureai.or.jp.<br>g02.cfdns.biz. g02.cfdns.co.uk. g02.cfdns.info. g02.cfdns.net.<br>geekstorage.com. gov-online.go.jp. halkbank.com.tr.<br>halkemeklilik.com.tr. hichina.com. hidmet.gov.rs. homemade-modern.com.<br>homepagemodules.de. hostindia.net. hostway.ro. hu.edu.jo.<br>hwclouds-dns.com. hwclouds-dns.net. i8t.com. i8t.net.<br>iavalley.cc.ia.us. ibb.gov.tr. icicibank.com. ihc.ru.<br>indiansexstories.mobi. inp.ne.jp. inplat.net. insure-systems.co.uk.<br>intellitree.com. internetmall.cz. ip-dynamic.com. iphost.gr.<br>iphotel.com.br. iris.gov.hk. isacombank.com.vn. itamaraty.gov.br.<br>itocd.net. ixor.hu. jams.or.kr. je-eigen-domein.nl. jetairways.com.<br>jfg-networks.net. jxedu.gov.cn. kamusm.gov.tr. kbops.net.<br>kci.go.kr. kissthenet.net. lamoda.kz. lamoda.ru. lcn.com.<br>lifespan.org. lopdns.se. magex.hu. mall.cz. mango-office.eu.<br>mango-office.ru. masimo.com. mcsdga.net. medibuddy.in. medway.gov.uk.<br>mercadolibre.com. met.ie. mezcalito.net. mh.gob.sv. midland.co.jp.<br>mof.gov.tw. momoshop.com.tw. morganstanley.net. motion-twin.com.<br>ms.com. mtgsy.co.uk. mtgsy.com. mtwo.co.jp. munhwa.com.<br>my100bank.com. n340.com. name-s.net. nameresolvers.com.<br>namibia.com.na. net. netandhost.com. netline.com. netsons.com.<br>netureza.com. networklayer.com. newthinking-ns.de. nexen.net.<br>nexthal.com. ngate.de. nl. noc.titech.ac.jp. nrf.re.kr.<br>ns.mtgsy.com. nuevobersa.com.ar. oglasnik.hr. open4000.com.<br>pcdf.df.gov.br. pchome.com.tw. phoneware.com. piapp.com.tw.<br>pkloss.com. playstation.net. pornylust.com. proceau.net. profi.ru.<br>qiwi.com. qq.com. quanta-camp.com. quicca.com. radio-msu.net.<br>rahul.net. reality.cz. regfish-ns.net. register-it.net. rmit.edu.au.<br>rsaweb.net. rte.com.br. ruru.ne.jp. s-dns.de. sacombank.com.vn.<br>sdjnptt.net.cn. securepod.com. securepoint.de. simplicityweb.co.uk.<br>sivit.org. skl.com.tw. slaski.pl. snsp.gob.mx. softlayer.net.<br>speedydns.net. sse.com.cn. startpunktet.com. syazen.net. synnex.ca.<br>tafeqld.edu.au. tam.ne.jp. tanhost.com. taobao.com. tarjetanaranja.com.<br>technopoint.ru. teothemes.com. thaiweb.net. tigerdns.com.<br>tinkoff.ru. tjce.jus.br. tl88.net. tokiomarine.com.br.<br>torontohydro.com. tradevan.com.tw. transdns.eu. transip.eu.<br>transip.net. transip.nl. tstartel.com. ttu.edu.tw. turkticaret.net.<br>tuxfamily.net. twimserver.com. twmp.com.tw. typl.gov.tw.<br>uberns.co.uk. uberns.com. uberns.eu. uberns.info. uberns.net.<br>uberns.org. ubisoft.com. ucs.ed.ac.uk. uhcloud.com. umsa.bo.<br>unbit.it. uptime8.net. uqroo.mx. v-dns.de. valmis.fi. versanus.hu.<br>veryns.com. voipwelcome.com. warnahost.net. wavedns.net. web4ce.cz.<br>webserversystems.com. webservicesrl.com. webstarts.com. wechat.com.<br>wegener.nl. wildberries.by. wildberries.ru. wvi.org. xepher.net.<br>youku.com. ysk.gov.tr. zcmbc.com.cn. zdnscloud.biz. zdnscloud.com.<br>zdnscloud.info. zdnscloud.net. zdnscloud.org. zgr.kts.ru.<br>zmbox.it. zvezdamedia.ru.<br><br>-- <br>Mark Andrews, ISC<br>1 Seymour St., Dundas Valley, NSW 2117, Australia<br>PHONE: +61 2 9871 4742 INTERNET: marka@isc.org<br><br></div></body></html>