Paul Vixie: Re: [dns-operations] DNS issue accidentally leaked?

Thu Jul 24 19:15:35 UTC 2008

Some broadband providers here in .br seems to be blocking access to
the dns-oarc.net test zone (but not to the portal site); most thought
it was intended behavior by those providers (hiding instead of
patching), but you are right, someone might have corrupted the test
zone itself, which aleviates the pressure on the provider to patch it
which in turn keeps the exploits working for more time.

Rubens

On Thu, Jul 24, 2008 at 3:45 PM, Scott Berkman
<scott.berkman at reignmaker.net> wrote:
> Is it just me or is the test page below down now?
>
> Or maybe some poisoned the NS record for dns-oarc.net and sent it to
> nowhere to stop testing! (J/K since I can get to the rest of the page
> fine).
>
>        -Scott
>
> -----Original Message-----
> From: Ken A [mailto:ka at pacific.net]
> Sent: Thursday, July 24, 2008 2:40 PM
> To: Steve Tornio
> Cc: nanog at merit.edu
> Subject: Re: Paul Vixie: Re: [dns-operations] DNS issue accidentally
> leaked?
>
> Steve Tornio wrote:
>>
>> On Jul 24, 2008, at 12:17 PM, Duane Wessels wrote:
>>
>>>> xpara.com tests to lock up my iPhone, or I would use that checker to
>>>> verify the iPhone DNS.  Anyone have a link to a decent test that I
>>>> could run on the iPhone?
>>>
>>> Give this one a try:
>>>
>>> http://entropy.dns-oarc.net/test/
>>>
>>
>> In this test, my iPhone reports:
>>
>> 209.183.33.23 Source Port Randomness: GREAT
>> 209.183.33.23 Transaction ID Randomness: GREAT
>>
>> I encourage anyone else concerned with their providers to actually test
>> them instead of taking anyone's word for it.
>>
>> Steve
>>
>
> on AT&T you might want to run it more than once.. Mine shows POOR 1 out
> of 5 times. :-(
> Hope they finish patching sooooon!
> Ken
>
> --
> Ken Anderson
> Pacific.Net
>
>
>
>