queries

Mark Andrews Mark_Andrews at isc.org
Thu Dec 15 00:56:15 UTC 2005


> Thanks for the heads up, I don't handle the external DNS, I should 
> probably know more about why(security risks?) that would be an issue 
> before I ask the people incharge of external DNS if I should change it.
> 
> Thank you again.

	When you publish a delegation you are telling the world that
	you are willing to answer queries for this zone on these
	nameservers.  If you are not willing to do this then don't
	list the nameserver.  Currently the only nameservers listed
	in the parent zone don't answer queries from my address or my
	IPS's nameservers (203.2.75.132, 198.142.0.51).

	I suspect someone has said we don't need to answer queries
	from APNIC.  There is no one anywhere is ASIA or the Pacific
	we would ever want to talk to.  The fact that you are talking
	to me (indirectly via a mailing list) show how wrong and short
	sighted that reasoning to be.

hopevale.com.           172800  IN      NS      ns3.wnyric.org.
hopevale.com.           172800  IN      NS      ns4.wnyric.org.
;; Received 76 bytes from 192.26.92.30#53(C.GTLD-SERVERS.NET) in 852 ms

	Mark
 
> Mark Andrews wrote:
> > 	You may also want to fix the delegation for hopevale.com.
> > 	I would remove the two wnyric.org servers and add the
> > 	fast.net servers.  The later atleast allow anyone in
> > 	the world to query them.
> > 
> > hopevale.com.           64911   IN      NS      ns4.wnyric.org.
> > hopevale.com.           64911   IN      NS      ns1.fast.net.
> > hopevale.com.           64911   IN      NS      ns2.fast.net.
> > hopevale.com.           64911   IN      NS      ns3.fast.net.
> > hopevale.com.           64911   IN      NS      ns3.wnyric.org.
> > 
> > bsdi# tcpdump -n -i sis0 port 53 or icmp
> > tcpdump: listening on sis0
> > 08:47:05.030927 220.237.98.197.1328 > 168.169.8.22.53:  64126 MX? hopevale.
> com. (30)
> > 08:47:10.038943 220.237.98.197.1328 > 168.169.8.22.53:  64126 MX? hopevale.
> com. (30)
> > 08:47:21.574084 220.237.98.197.4487 > 168.169.8.21.53:  13419 MX? hopevale.
> com. (30)
> > 08:47:26.579327 220.237.98.197.4487 > 168.169.8.21.53:  13419 MX? hopevale.
> com. (30)
> > ^C
> > 1845 packets received by filter
> > 0 packets dropped by kernel
> > bsdi# 
> > 	Mark
> > 
> > 
> > --
> > Mark Andrews, ISC
> > 1 Seymour St., Dundas Valley, NSW 2117, Australia
> > PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org
> > 
> 
> 
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org



More information about the bind-users mailing list