DNSSEC deployment testing and awareness (Was: Re: IPv4 ANYCAST setup)
Phil Regnauld
regnauld at nsrc.org
Tue Mar 30 09:29:04 UTC 2010
Randy Bush (randy) writes:
>
> i.e. what can we do to maximize the odds that the victim will quickly
> find the perp, as opposed to calling our our tech support lines?
Ah yes, there was the second good reason for actually helping netops
and security officers :)
Tools:
https://www.dns-oarc.net/oarc/services/replysizetest
https://www.dnssec-deployment.org/wiki/index.php/Tools_and_Resources,
under troubleshooting:
http://labs.ripe.net/content/testing-your-resolver-dns-reply-size-issues
http://secspider.cs.ucla.edu/
Info sheets:
http://www.afnic.fr/actu/nouvelles/240/l-afnic-invite-les-responsables-techniques-reseaux-a-se-preparer-a-la-signature-de-la-racine-dns-en-mai-2010
(click English, top right)
... plenty of links there too.
Cheers,
Phil
More information about the NANOG
mailing list