Re: [ga] Re: [nznog] Verisign grabs *.net and *.com

[Stephane Bortzmeyer <bortzmeyer@xxxxxx>]

On Tue, Sep 16, 2003 at 12:45:53AM -0700,
 Jeff Williams <jwkckid1@xxxxxxxxxxxxx> wrote 
 a message of 40 lines which said:

>  Nice Patch. 
...
> > For those of you who use djbdns, a patch has been released that rejects A
> > records that resolve to 64.94.110.11. It'll return NXDOMAIN.

PowerDNS will probably have the same:

Subject: Re: [Pdns-users] Verisign bullshit
From: bert hubert <ahu@xxxxxxx>
To: "Ian R. Justman" <ianj@xxxxxxxxxxxxxxx>
Cc: pdns-users <pdns-users@xxxxxxxxxxxxxxxxxxxx>
Date: Tue, 16 Sep 2003 08:30:13 +0200
X-BeenThere: pdns-users@xxxxxxxxxxxxxxxxxxxx

On Mon, Sep 15, 2003 at 08:23:59PM -0700, Ian R. Justman wrote:

> Curious, is there a way that the recursor (or really, ANY nameserver for
> that matter) can be set up so then it doesn't query any rootservers that
> Verisign doesn't control?  As you all may know, these assholes are now
> resolving for EACH AND EVERY GODDAMNED DOMAIN NAME THAT DOESN'T EXIST.

It's not that simple. The only way so far to recognize their bogus answers
is by IP address. They control the GTLD servers and all GTLD servers now
show this behaviour. You can't easily do without, except by downloading the
.COM and .NET source yourself.

I'll add a feature to pdns to ignore answers containing a specified IP
address, which will effectively make this go away.

Thanks.

--
http://www.PowerDNS.com      Open source, database driven DNS Software
http://lartc.org           Linux Advanced Routing & Traffic Control HOWTO
_______________________________________________
Pdns-users mailing list
Pdns-users@xxxxxxxxxxxxxxxxxxxx
http://mailman.powerdns.com/mailman/listinfo/pdns-users