nanog mailing list archives

Re: Paul Vixie: Re: [dns-operations] DNS issue accidentally leaked?


From: "Rubens Kuhl Jr." <rubensk () gmail com>
Date: Thu, 24 Jul 2008 16:15:35 -0300

Some broadband providers here in .br seems to be blocking access to
the dns-oarc.net test zone (but not to the portal site); most thought
it was intended behavior by those providers (hiding instead of
patching), but you are right, someone might have corrupted the test
zone itself, which aleviates the pressure on the provider to patch it
which in turn keeps the exploits working for more time.



Rubens




On Thu, Jul 24, 2008 at 3:45 PM, Scott Berkman
<scott.berkman () reignmaker net> wrote:
Is it just me or is the test page below down now?

Or maybe some poisoned the NS record for dns-oarc.net and sent it to
nowhere to stop testing! (J/K since I can get to the rest of the page
fine).

       -Scott

-----Original Message-----
From: Ken A [mailto:ka () pacific net]
Sent: Thursday, July 24, 2008 2:40 PM
To: Steve Tornio
Cc: nanog () merit edu
Subject: Re: Paul Vixie: Re: [dns-operations] DNS issue accidentally
leaked?

Steve Tornio wrote:

On Jul 24, 2008, at 12:17 PM, Duane Wessels wrote:

xpara.com tests to lock up my iPhone, or I would use that checker to
verify the iPhone DNS.  Anyone have a link to a decent test that I
could run on the iPhone?

Give this one a try:

http://entropy.dns-oarc.net/test/


In this test, my iPhone reports:

209.183.33.23 Source Port Randomness: GREAT
209.183.33.23 Transaction ID Randomness: GREAT

I encourage anyone else concerned with their providers to actually test
them instead of taking anyone's word for it.

Steve


on AT&T you might want to run it more than once.. Mine shows POOR 1 out
of 5 times. :-(
Hope they finish patching sooooon!
Ken

--
Ken Anderson
Pacific.Net






Current thread: