Article View: microsoft.public.windows.server.dns
Article #1Don't do what the "dnslife.com" announcement invites you to do.
From: Jonathan de Boyne Pollard
Date: Tue, 26 Aug 2003 11:32
Date: Tue, 26 Aug 2003 11:32
36 lines
4118 bytes
4118 bytes
[This is cross-posted to the same places that the announcement was multi-posted, in order to save the unsuspecting, who might otherwise have na๏ฟฝvely trusted it and done as it suggests, any grief.] KD> Here is our new site. It will take everyone to make it happen. KD> [...] KD> all are invited to set their name server info to 64.146.111.234 KD> to join our community or to just look around. I strongly recommend _not_ changing one's "name server info" to 64.146.111.234. The DNS server listening on that IP address is both grossly misconfigured and egregiously broken. One example of its gross misconfiguration is that in response to an "NS" query for "." it returns a list combining the "." content DNS servers from two entirely separate "." content DNS service organizations, with itself included as well (seemingly just for the heck of it). This is a recipe for disaster - even for a _working_ DNS server software. One example of its brokenness is that it cannot decide whether domain names exist or not. Ask it an "A" query for "aroot.pacroot." (the intermediate name of one of the "." content DNS servers that it lists) and it will return an "A" resource record. Ask it another type of query for that very same domain name, and it will respond with either "no such name" or "server failure". Another example of its brokenness is that in response to queries with the RD bit set to 0 it returns empty resource record sets, even where the responses to the same queries with the RD bit set to 1 show that it has the real (non-empty) answers in a cache, and _even_ where the cached answer would actually be a "no such name" answer. Next to the sheer wrongness of the responses that the software used by the 64.146.111.234 DNS server gives and the incompetent way that that DNS server has been configured, the fact that the content HTTP server for the relevant web site doesn't have virtual hosting correctly configured and operational seems relatively minor in comparison.
Technical Details
Message-ID:
<3F4B4537.D100ED0C@tesco.net>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.fjserv.net!newsfeed.icl.net!newsfeed.fjserv.net!kibo.news.demon.net!demon!proxad.net!newspeer1-gui.server.ntli.net!ntli.net!newsfep4-winn.server.ntli.net.POSTED!53ab2750!not-for-mailReferences:
<vkj8h0fcburn16@corp.supernews.com> <vklb87nhscpn35@corp.supernews.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII X-Google-Thread: f4461,96cb71f0fc1c291f,start X-Google-Attributes: gidf4461,public X-Google-Thread: f7af6,96cb71f0fc1c291f,start X-Google-Attributes: gidf7af6,public X-Google-Thread: fe4ef,96cb71f0fc1c291f,start X-Google-Attributes: gidfe4ef,public X-Google-Thread: f5708,96cb71f0fc1c291f,start X-Google-Attributes: gidf5708,public X-Google-Thread: 110989,96cb71f0fc1c291f,start X-Google-Attributes: gid110989,public X-Google-Thread: 111758,96cb71f0fc1c291f,start X-Google-Attributes: gid111758,public X-Google-Thread: f9855,96cb71f0fc1c291f,start X-Google-Attributes: gidf9855,public X-Google-Thread: 10d203,d9f96e3ac49b49b3 X-Google-Attributes: gid10d203,public X-Google-ArrivalTime: 2003-08-26 08:47:58 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.fjserv.net!newsfeed.icl.net!newsfeed.fjserv.net!kibo.news.demon.net!demon!proxad.net!newspeer1-gui.server.ntli.net!ntli.net!newsfep4-winn.server.ntli.net.POSTED!53ab2750!not-for-mail From: Jonathan de Boyne Pollard <J.deBoynePollard@tesco.net> Newsgroups: microsoft.public.windows.server.dns,microsoft.public.win2000.dns,eunet.cyberrights,fj.net.ip.dns,microsoft.public.security,comp.protocols.tcp-ip.domains,alt.freewebhosting.support,microsoft.public.windowsnt.dns Subject: Don't do what the "dnslife.com" announcement invites you to do. Followup-To: comp.protocols.tcp-ip.domains Organization: Wack's Wicks Works Lines: 36 Sender: J.deBoynePollard@default.local Message-ID: <3F4B4537.D100ED0C@tesco.net> References: <vkj8h0fcburn16@corp.supernews.com> <vklb87nhscpn35@corp.supernews.com> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Mailer: Mozilla 4.04 [en] (OS/2; I) Date: Tue, 26 Aug 2003 12:32:07 +0100 NNTP-Posting-Host: 80.5.186.181 X-Complaints-To: abuse@ntlworld.com X-Trace: newsfep4-winn.server.ntli.net 1061912878 80.5.186.181 (Tue, 26 Aug 2003 16:47:58 BST) NNTP-Posting-Date: Tue, 26 Aug 2003 16:47:58 BST