- dns-wg - mailman.ripe.net

Announcement: Test Report on DNSSEC impact on SOHO CPE
by Ray.Bellis＠nominet.org.uk 16 Sep '08

16 Sep '08

[with apologies for the cross-postings to multiple lists] Dear Colleagues, We would like to announce the publication of a joint study entitled "DNSSEC Impact on Broadband Routers and Firewalls", available for download at: http://download.nominet.org.uk/dnssec-cpe/DNSSEC-CPE-Report.pdf In summary (based on 24 tested units): "... we conclude that just 6 units (25%) operate with full DNSSEC compatibility "out of the box." 9 units (37%) can be reconfigured to bypass DNS proxy incompatibilities. Unfortunately, the rest (38%) lack reconfigurable DHCP DNS parameters, making it harder for LAN clients to bypass their interference with DNSSEC use. These findings, their potential impact on DNSSEC use by broadband consumers, and implications for router/firewall manufacturers, are presented and analyzed in this report. " Ray Bellis Senior Researcher in Advanced Projects Nominet UK Lisa A. Phifer President, Core Competence, Inc.

2 2

Agenda items for RIPE57
by Jim Reid 09 Sep '08

09 Sep '08

It's that time again... The next RIPE meeting is just over 6 weeks away. So it's about time an agenda was put together for the WG sessions in Dubai. Could you please send suggestions for agenda topics and/or presentations to dns-wg-chair(a)ripe.net ? Thanks.

1 0

Upgrade of the reverse DNS provisioning system at 8 September 2008, between 09:00 and 12:00 (UTC)
by Wolfgang Nagele 03 Sep '08

03 Sep '08

[Apologies for duplicate emails] Dear Colleagues, On 8 September 2008, between 09:00 and 12:00 (UTC), the RIPE NCC will upgrade the reverse DNS provisioning system. This change will enable the server ns.ripe.net to perform zone transfers over IPv6. If your reverse zone has a master server with an IPv6 address, this will be used in preference to the IPv4 address after the change. We apologise for any inconvenience this change may cause. If you have any questions or concerns about this, please email <dns-help(a)ripe.net>. Regards, -- Wolfgang Nagele DNS System Engineer RIPE NCC Singel 258 1016 AB Amsterdam Tel: +31 20 535 4444 Fax: +31 20 535 4445

1 0

Signed .cz zone
by Ondřej Surý 02 Sep '08

02 Sep '08

Hello all, we have signed .cz on Sep 1st 2008. Key can be found at https://www.nic.cz/dnssec/ (bottom of the page). EPP interface for registering DS RRsets will be launched on Sep 30 2008. Please report any errors (hope there are none) or sugestions to my address. Regards, -- Ondřej Surý technický ředitel/Chief Technical Officer ----------------------------------------- CZ.NIC, z.s.p.o. -- .cz domain registry Americká 23,120 00 Praha 2,Czech Republic mailto:ondrej.sury@nic.cz http://nic.cz/ sip:ondrej.sury@nic.cz tel:+420.222745110 mob:+420.739013699 fax:+420.222745112 -----------------------------------------

1 0

Planned maintenance on ns.ripe.net, 2 Sept.
by Sjoerd Oostdijck 01 Sep '08

01 Sep '08

[Apologies for duplicate e-mails.] Dear Colleagues, On Tuesday, 2 September 2008, the RIPE NCC will perform maintenance on the ns.ripe.net server between 10:00 and 12:00 (UTC). During this period, it may not be able to answer DNS queries. The aim of this maintenance is to introduce a second server to improve performance of the system. If ns.ripe.net provides secondary DNS name service for your zone, no changes on your side will be required. During the maintenance, other servers in your NS set will take over and no downtime will be visible to the Internet. We apologise for any inconvenience this maintenance may cause. If you have any questions or concerns about this, please email dns-help(a)ripe.net Regards, Sjoerd Oostdijck DNS Services The RIPE NCC

1 0

Subdomain Add Question
by Bill Honneus (honneus) 09 Aug '08

09 Aug '08

Hi, I have a domain hosted at a third party site called my.domain.com. In my company's zone file, we have NS records that refer to this third party hosting site, and we have an 'A' record set up that associates the my.domain.com domain to the IP address of a load balancer that balances traffic coming into the site between two web servers, all in a DMZ. We also have an MX record that refers the my.domain.com to a mail server host, also in the DMZ. Finally, we have PTR records that refer back to the load balancer and mail server hosts. All this is set up correctly, everything works, and all DNS checks pass. I need to add a subdomain, call it sub.my.domain.com, and I would like to associate the subdomain to the same load balancer if possible. What is the best way to do this without disrupting the incoming traffic to the primary domain or the flow of incoming SMTP traffic to the mail server? Is it best in this situation to use a CNAME to map the subdomain, or to use a whole new 'A' record? If I create a new 'A' record, I would not want to add a new PTR record for the sub.my.domain.com as the IP address would be the same as the PTR that refers back to my.domain.com. This I believe, would cause DNS checks on my mail server to fail, since there would be two hostnames associated with the same IP address. Your help is appreciated! Bill

2 1

DNS Lameness statistics and notifications
by Sjoerd Oostdijck 01 Aug '08

01 Aug '08

Dear Colleagues, In January 2007, RIPE Document ripe-400 was created to address lameness in the reverse DNS tree. This RIPE Document can be found online at: http://www.ripe.net/ripe/docs/ripe-400.html We have been monitoring name servers for some time now and statistics from the data gathered have been published online each month at: http://www.ripe.net/info/stats/dns-lameness/ We are now ready to start sending out notifications to the maintainers of these zones, alerting them to a problem. The e-mail messages will point to the DNS Lameness FAQs, which explain the possible problems and give some pointers to help solve them. The FAQs can be found online at: http://www.ripe.net/info/stats/dns-lameness/faq.html Initially, we will send less then 100 e-mails to various contacts. This number will increase over the following months until all maintainers with lame servers are contacted. Kind regards, Sjoerd Oostdijk DNS Services Group The RIPE NCC

5 4

.ORG DNSSEC Survey
by Jakob Schlyter 30 Jun '08

30 Jun '08

Dear RIPE Working Group Member, You are invited to complete the following DNSSEC Survey conducted by .ORG, The Public Interest Registry. The purpose of this survey is to evaluate DNSSEC preparedness and to gain more information on current and future plans to implement DNSSEC. We would greatly appreciate your response, so we hope you are able to take a few minutes to complete this survey. Your responses will remain anonymous as no identity information will be recorded. To participate in the survey, please visit http://guest.cvent.com/v.aspx?1A,Q3,95818ada-0ceb-4ea2-bce2-c2d94d68da13 We look forward to your response, Sincerely, Jakob Schlyter, Kirei AB for .ORG, The Public Interest Registry

12 25

Updated DNS migration document
by Jim Reid 09 Jun '08

09 Jun '08

Here is the latest version of the DNS migration document. I've included the comments made by Joao and Jarle. Does anyone have anything else to add?

5 5

ANNOUNCEMENT: RIPE NCC Training Courses
by Training 26 May '08

26 May '08

[Apologies for duplicate e-mails] Dear Colleagues, The RIPE NCC invites you to register for one of our upcoming training courses: - The LIR Training Course This course teaches LIRs how to request Internet number resources and interact with the RIPE NCC. A course outline is available at: http://www.ripe.net/training/lir/outline.html - The Routing Registry Training Course This course teaches LIRs how to use the RIPE Database for routing. A course outline is available at: http://www.ripe.net/training/rr/outline.html - The DNS for LIRs Training Course This course teaches LIRs about the RIPE NCC's DNS-related services. A course outline is available at: http://www.ripe.net/training/dns/outline.html To see the location of upcoming courses and to register, please use the LIR Portal or complete the registration form on our website at: http://www.ripe.net/cgi-bin/trainingform.pl.cgi If you have any questions please do not hesitate to contact us at <training(a)ripe.net>. Kind regards, Rumy Kanis Training Services Manager RIPE NCC

1 0