- dns-wg - mailman.ripe.net

Agenda for RIPE 46 (4th and final version)
by Patrik Fältström 01 Sep '03

01 Sep '03

When discussing the agenda, and order of the items, items related to CENTR and registry/registrar mechanisms are taken care of _FIRST_, on the Tuesday session. The rest on Thursday. I will personally not arrive to Amsterdam until Wed evening, so Peter, Jaap and Jim will take care of the wg until thursday morning. Any suggestions on late changes I because of this redirect at them. regards, paf Agenda at RIPE 46 ----------------- Tuesday 16:00-17:30 ------------------- [0] Charter / Agenda Bashing / Goals etc 0.1 Agenda, welcome etc (15 min) Discussion: Peter Koch, Jim Reid and Jaap Akkerhuis. [2] Reports / status items (same bullets every meeting) 2.5 IDN deployment / experience 2.5.1 Experience in Poland (15 minutes) Andrzej Bartosiewicz <andrzejb(a)nask.pl> 2.7 CENTR Technical committee 2.7.1 Report from .JP (10 min) Yasuhiro Orange Morishita / 森下泰宏 <yasuhiro(a)jprs.co.jp> - JP DNS server update - IDN deployment update - Report from DNSQC-TF (DNS Quality check Task Force) 2.7.2 Report from .PL (10 min) Andrzej Bartosiewicz [3] Special invited (longer) presentation (30 min) 3.1 RIPE NCC DNS Monitoring Daniel Karrenberg <daniel.karrenberg(a)ripe.net> Thursday 9:00-10:30 ------------------- [0] Charter / Agenda Bashing / Goals etc (30 min) Leader of the discussion: Patrik Faltstrom Help from co-chairs: Peter Koch, Jim Reid and Jaap Akkerhuis. 0.2 Charter 0.3 What are we doing here anyway? [1] Topics with deliverables (15 min) 1.1 Quality of the DNS Topic-Leader: Unknown 1.1.1 Background, deliverables, participants etc 1.1.1.1 Who will lead this topic? 1.1.1.2 Deliverables 1.2.1 Tools 1.2.1.1 DomainSentinel (15 min) John Brown <role(a)chagres.net> [2] Reports / status items (same bullets every meeting) 2.1 Monitoring 2.1.1 RIPE NCC DNS Monitoring (5 min) Daniel Karrenberg <daniel.karrenberg(a)ripe.net> 2.2 DNS in the IETF 2.2.1 DNSEXT (5 min) Olaf Kolkman <olaf(a)ripe.net> 2.2.2 DNSOP (5 min) Lars-Johan Liman <liman(a)autonomica.se> 2.2.3 Other wg's which touch DNS 2.2.3.2 SSHFP (5 min) Jakob Schlyter <jakob(a)rfc.se> 2.2.3.3 ENUM (5 min) Patrik Faltstrom <paf(a)cisco.com> 2.2.3.4 PROVREG (5 min) Jaap Akkerhuis <jaap(a)sidn.nl> Thursday 11:00-12:30 -------------------- 2.4 Root servers 2.4.2 B-Root (5 min) Bill Manning <bmanning(a)ISI.EDU> 2.4.2 F-Root (5 min) Joao Damas <joao(a)isc.org> 2.4.3 I-Root (5 min) Lars-Johan Liman <liman(a)autonomica.se> 2.6 DNSSEC deployment / experience 2.6.1 DNSSEC status (5 min) Sam Weiler <weiler(a)tislabs.com> 2.7 Anycast deployment / experience 2.7.1 Dave Knight (5 min) 2.8 DNS Software 2.8.1 Bind (5 min) Joao Damas <joao(a)isc.org> 2.8.2 OpenReg (5 min) Joao Damas <joao(a)isc.org> 2.8.3 NSD (5 min) Ted Lindgreen <ted(a)NLnetLabs.nl> 2.9 IPv6 deployment / experience 2.9.1 Adding IPv6 glue to the root zone (5 min) Ronald van der Pol [4] Temporary items 4.1 Use of DNS for SPAM prevention (15 min + max 10 minutes discussion) Note: This is not to be a spam discussion, but more a heads-up on the various mechanisms which exists and are discussed for example in the anti-spam research group in the IETF. Anne P. Mitchell, Esq. <amitchell(a)habeas.com> 4.2 The status of the rs.net testbed: (15 min) Bill Manning <bmanning(a)ISI.EDU> CN & JP tlds registered punycode entries KeyMgmt issues w/ persistant DNSSEC testbeds Precursors for IPv6 tlds & glue in the root zone 4.3 SYN flood like patterns on nameserver due to firewall issues? Peter Koch <pk(a)TechFak.Uni-Bielefeld.DE>

1 0

Agenda for DNS-wg at RIPE 46, version 3
by Patrik Fältström 27 Aug '03

27 Aug '03

Third version of the agenda. The reason why it has not ended up on the RIPE website is that I have all the time bcc:ed the correct address at RIPE NCC secretariat when I post this agenda to this address, and that doesn't work apparently. Mea culpa. Sorry. Exact division of agenda items on the different slots will happen shortly. Things which very late in the process still have "unknown" on them will be removed. Keep on sending me requests! FYI: I will not arrive to Amsterdam before late Wed evening, so my dear co-chairs will take care of sessions before that point in time. regards, paf Agenda at RIPE 46 ----------------- [0] Charter / Agenda Bashing / Goals etc Leader of the discussion: Jim Reid Help from co-chairs: Peter Koch and Jaap Akkerhuis. 0.1 Agenda 0.2 Charter 0.3 What are we doing here anyway? [1] Topics with deliverables 1.1 Quality of the DNS Topic-Leader: Unknown 1.1.1 Background, deliverables, participants etc 1.1.1.1 Who will lead this topic? 1.1.1.2 Deliverables 1.2.1 Tools 1.2.1.1 DomainSentinel John Brown <role(a)chagres.net> [2] Reports / status items (same bullets every meeting) (approx 5 min each) 2.1 Monitoring 2.1.1 RIPE NCC DNS Monitoring Daniel Karrenberg <daniel.karrenberg(a)ripe.net> 2.2 DNS in the IETF 2.2.1 DNSEXT Lars-Johan Liman <liman(a)autonomica.se> 2.2.2 DNSOP Lars-Johan Liman <liman(a)autonomica.se> 2.2.3 Other wg's which touch DNS 2.2.3.1 IPSECKEY Unknown 2.2.3.2 SSHFP Jakob Schlyter <jakob(a)rfc.se> 2.2.3.3 ENUM Patrik Faltstrom <paf(a)cisco.com> (depending on what day it will be) 2.2.3.4 PROVREG Jaap Akkerhuis <jaap(a)sidn.nl> 2.3 EPP deployment / experience / status Unknown 2.4 Root servers 2.4.2 B-Root Bill Manning <bmanning(a)ISI.EDU> 2.4.2 F-Root Joao Damas <joao(a)isc.org> 2.4.3 I-Root Lars-Johan Liman <liman(a)autonomica.se> 2.5 IDN deployment / experience 2.5.1 Experience in Poland (15-30 minutes) Andrzej Bartosiewicz <andrzejb(a)nask.pl> 2.6 DNSSEC deployment / experience 2.6.1 DNSSEC status Sam Weiler <weiler(a)tislabs.com> 2.7 Anycast deployment / experience 2.7.1 Dave Knight 2.7 CENTR Technical committee Unknown 2.8 DNS Software (I accept info from _anyone_ here, not only ISC things) 2.8.1 Bind (maybe) Joao Damas <joao(a)isc.org> 2.8.2 OpenReg (maybe) Joao Damas <joao(a)isc.org> 2.8.3 NSD (they are asked, but have not said "ok" yet) Erik Rozendaal <erik(a)NLnetLabs.nl> Alexis Yushin <alexis(a)NLnetLabs.nl> 2.9 IPv6 deployment / experience 2.9.1 Adding IPv6 glue to the root zone Ronald van der Pol [3] Special invited (longer) presentation (30 min) 3.1 RIPE NCC DNS Monitoring Daniel Karrenberg <daniel.karrenberg(a)ripe.net> [4] Temporary items (approximately 15 min each) 4.1 Use of DNS for SPAM prevention Note: This is not to be a spam discussion, but more a heads-up on the various mechanisms which exists and are discussed for example in the anti-spam research group in the IETF. Anne P. Mitchell, Esq. <amitchell(a)habeas.com> 4.2 The status of the rs.net testbed: CN & JP tlds registered punycode entries KeyMgmt issues w/ persistant DNSSEC testbeds Precursors for IPv6 tlds & glue in the root zone

1 0

Agenda DNS wg at RIPE 46
by Patrik Fältström 21 Aug '03

21 Aug '03

This is the first suggested agenda. Note that this include: - A skeleton built from the proposed charter of the wg, which you might not agree with. If the charter change, of course also the agenda is to be changed. - Bullets which doesn't have any speakers (yet). I want *YOU* to agree on saying something. Or, even better, nominate your friend/enemy instead of taking up the glove yourself!!! :-) - No time for each agenda item yet. It is unclear how to divide the three 90 minute slots we have between all DN* groups which we might merge Agenda at RIPE 46 ----------------- [0] Charter / Agenda Bashing / Goals etc Leader of the discussion: Patrik Fältström Help from co-chairs: Jim Reid, Peter Koch and Jaap Akkerhuis. 0.1 Agenda 0.2 Charter 0.3 What are we doing here anyway? [1] Topics with deliverables 1.1 Quality of the DNS Leader of the discussion: Unknown [2] Reports / status items (same bullets every meeting) (max 5 min each) 2.1 Monitoring 2.1.1 RIPE NCC DNS Monitoring Daniel Karrenberg <daniel.karrenberg(a)ripe.net> 2.2 DNS in the IETF 2.2.1 DNSEXT Unknown 2.2.2 DNSOP Unknown 2.2.3 Other wg's which touch DNS Unknown 2.3 EPP deployment / experience / status Edward Lewis <edlewis(a)arin.net> Suggested reading: http://www.read of ipe.net/ripe/mail-archives/dns-wg/2003/msg00122.html 2.4 Root servers Unknown 2.5 IDN deployment / experience Unknown 2.6 DNSSEC deployment / experience Unknown 2.7 Anycast deployment / experience 2.7.1 Dave Knight 2.7 CENTR Technical committee Unknown 2.8 DNS Software 2.8.1 Bind Unknown 2.8.2 OpenReg Unknown 2.9 IPv6 deployment / experience Unknown [3] Special invited (longer) presentation (30 min) 3.1 RIPE NCC DNS Monitoring Daniel Karrenberg <daniel.karrenberg(a)ripe.net> [4] Temporary items (15 min each) 4.1 Use of DNS for SPAM prevention Note: This is not to be a spam discussion, but more a heads-up on the various mechanisms which exists and are discussed for example in the anti-spam research group in the IETF. Anne P. Mitchell, Esq. <amitchell(a)habeas.com>

1 1

Alberto Jimenez De Leon/INFR/TESA está ausente de la oficina.
by alberto.jimenezdeleon＠telefonica.es 15 Aug '03

15 Aug '03

Estaré ausente de la oficina desde el 07/08/2003 y no volveré hasta el 01/09/2003. Responderé a su mensaje cuando regrese. ___________________________________________________________________________ Este mensaje se dirige exclusivamente a su destinatario y puede contener información privilegiada o confidencial. Si no es vd. el destinatario indicado, queda notificado de que la utilización, divulgación y/o copia sin autorización está prohibida en virtud de la legislación vigente. Si ha recibido este mensaje por error, le rogamos que nos lo comunique inmediatamente por esta misma vía y proceda a su destrucción. This message is intended exclusively for its addressee and may contain information that is CONFIDENTIAL and protected by professional privilege. If you are not the intended recipient you are hereby notified that any dissemination, copy or disclosure of this communication is strictly prohibited by law. If this message has been received in error, please immediately notify us via e-mail and delete it. ___________________________________________________________________________

1 0

Proposal: Charter for DN* wg at RIPE
by Patrik Fältström 13 Aug '03

13 Aug '03

Note: I want _LOTS_ of comments on the following. You will see after this a message about the agenda of the meeting at RIPE 46. Idea: Create a list of "topics" which are divided in two groups: [1] Topics which are larger discussion items. Each one will have one or more deliverables. There is a small group of people responsible for deliverables and they report back every DN* meeting. [2] Organisations and groups (inside and outside of RIPE and RIPE NCC) which report to the DNS wg what is happening, what is currently discussed etc. This is summarized at every RIPE meeting as a compiled report to the RIPE DNS wg participants so they know what is happening in the world The agenda at the RIPE meeting then consists of these two PLUS two other categories: [3] Invited longer talks [4] Short reports from groups which do not come back every meeting The result from [3] and [4] is only included in the minutes of the RIPE meeting. Nothing more, nothing less. Is that ok? Given this is ok, the question is then what to include under each one of the bullets. This is (as you will see on the proposed agenda) what I want to have discussed at the RIPE meeting. Below you can see _MY_PERSONAL_ idea. Probably many things forgotten, possibly many things wrong. Please correct. Let me know you are interested in spending some CPU cycles. Small things which will make the future more organized is that my goal is to keep exactly the same "item numbers" for every item, and never changing them over the years. That means the only topic I have got suggestions on (see below) is 1.1. Next will be 1.2. Etc. paf Charter for the DN* wg at RIPE (to be updated at each RIPE meeting) ------------------------------------------------------------------- [1] Topics with deliverables 1.1 Quality of the DNS We have a few contributors here: + domainSentinel tool for lame checking Chagres Role Account <role(a)chagres.net> + RIPE NCC DNS Monitoring Daniel Karrenberg <daniel.karrenberg(a)ripe.net> + DNSCHECK for verification of delegations Patrik Fältström <paf(a)cisco.com> Deliverables: 1.1.1 Recommendations for measures DNS serv*ice* quality 1.1.2 Recommendations how to summarise the results for consumption by the non-technical public 1.1.3 What is an "error"? 1.1.3.1 "Lame" 1.1.3.2 "Wrong glue" 1.1.3.3 "Non-authoritative response" 1.1.3.4 "Transport over TCP" 1.1.3.5 ... 1.1.4 What is good practice regarding measurement? 1.1.5 ... [2] Reports / status items 2.1 Monitoring 2.1.1 RIPE NCC DNS Monitoring Daniel Karrenberg <daniel.karrenberg(a)ripe.net> 2.2 DNS in the IETF 2.2.1 DNSEXT 2.2.2 DNSOP 2.2.3 Other wg's which touch DNS 2.3 EPP deployment / experience / status Edward Lewis <edlewis(a)arin.net> 2.4 Root servers 2.5 IDN deployment / experience 2.6 DNSSEC deployment / experience 2.7 Anycast deployment / experience 2.7.1 Dave Knight 2.7.2 I-Root (Lars-Johan Liman) 2.7 CENTR Technical committee 2.8 DNS Software 2.8.1 Bind 2.8.2 OpenReg 2.8.3 ... 2.9 IPv6 deployment / experience Unknown

2 2

Looking for a tool to find the fastest DNS server
by Stephane Bortzmeyer 04 Aug '03

04 Aug '03

I'm looking for a small tool (running on Unix) that can take a list of DNS servers, a query to ask (such as "A ns1.nic.fr.") and which can print the fastest server to reply. Something like "netselect" which only exercices the kernel, not the actual servers, unfortunately (and which can be blocked by filters): ~ % netselect {a,b,c,d,e,f,g,h,i,j,k,l,m}.root-servers.net 123 i.root-servers.net BIND9's lib/dns/resolver.c has code to do so and I wonder if someone extracted it in a simple tool?

4 6

Remote registration,
by alireza saleh 31 Jul '03

31 Jul '03

Dear Friends, Thank you about a software that supports reseller, I think due to special laws in my country,a software have to be developed by the team and I, besides the technology to do the payment by credit card or the same is not available in my country, the only available way to pay is bank transfer. Do we have any program for editing and appending Bind Zone files ?,in the other word a CGI program that gives the name sever, ip address and the domain name as input ,then it modifies or add this entry ? would you also please give me a suggestion about the DNS server program to be use instead of bind ? it should be Secure, Reliable and fast, I always use Bind , but I heard it has many bugs eventhough I haven't seen any. Thank you in advance, Kind regards Alireza Saleh.

8 14

AW: [dns-wg] Remote registration,
by Chahn 31 Jul '03

31 Jul '03

Please deleate my e-Mail account out of your mailing-list. I am no longer interested in these information! Best regards C. Hahn -----Ursprungliche Nachricht----- Von: Edward Lewis [mailto:edlewis@arin.net] Gesendet: Donnerstag, 31. Juli 2003 04:28 An: Stephane Bortzmeyer Cc: dns-wg(a)ripe.net Betreff: Re: [dns-wg] Remote registration, At 11:05 +0200 7/28/03, Stephane Bortzmeyer wrote: >On Sat, Jul 26, 2003 at 12:14:46AM +0200, > Brad Knowles <brad.knowles(a)skynet.be> wrote >> If you want a fully compliant nameserver, there's not much choice. > >Fully compliant with every RFC ever published about the DNS? Come on, Before even wading into that argument - the RFCs on DNS are so loosely written, being "fully compliant" is impossible. For instance, there is code in RFC 1876 which is buggy. (Yes, yes, it's an experimental RFC...but...) -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Edward Lewis +1-703-227-9854 ARIN Research Engineer ...as graceful as a blindfolded bull in a china shop...

2 1

looking for a tool
by Edward Lewis 25 Jul '03

25 Jul '03

Although I don't have my requirements completely mapped out yet, I want to see if there's a tool available to do what I think I want. I want to give a DNS zone name and an network address to the tool and have the tool tell me if what's at port 53 of that address returns an authoritative answer for the SOA RR. By "network address" I mean IP, v4 now and later, v6 now *and/or* later. By "give" - the format is negotiable, but I will be starting from a list that associates not only my notion of the authoritative servers and a registration record I have. By "authoritative answer" I expect to see the RCODE=0, AA flag=1, and in the answer section (one SOA, no CNAME please) I want the tool to make a decent effort at UDP congestion handling, i.e., a few retries if there is no answer. I want to be able to call the tool repeatedly and possibly in parallel. I want the tool to return the result in a way I can easily parse with something as stupid as a computer. ;) I mention this because I want a simplified result for use in my testing, as opposed to the next request. I want the tool to return me all header fields and answer section so I can feed this to a diagnosis tool and a stat collector - returned in a way I can send to a different analysis procedure. There are a lot of things I don't want the tool to do. I don't care about the contents of the SOA record's RDATA. no responsible party testing, timing parameters no serial number test I don't care about any other record type. no NS consistency test I don't care about any other aspect of network operations no smtp probing Well, I care, but they are beyond my current mission scope. PS - Comments on my "I wants" and I don't wants" are welcome. ;) -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Edward Lewis +1-703-227-9854 ARIN Research Engineer ...as graceful as a blindfolded bull in a china shop...

3 2

DNS Meeting in Amsterdam in September
by Patrik Fältström 18 Jul '03

18 Jul '03

Being the person responsible for the agenda for the September meeting, I hereby ask for agenda items, and general input. As we all know, the DNS wg has been not as focused as would be expected by a wg at RIPE. The new chairs want to change that. As you can see on http://www.ripe.net/ripe/wg/dns/index.html, the charter is extremely limited, and on top of that wrong: > The Domain Name System working group discusses current BIND versions. > It is also concerned with potential pollution of the DNS and with > domain name related issues. The DNS working group has the last couple of meetings had two goals: - Discussion forum for "current DNS operational issues" - Presentations on status for various project/initiatives elsewhere, such as the DNS related topics in the IETF If it is the case this wg feel there is space for both of the above (something I personally hope), the next step is to focus each one of them a bit more. Especially the first one. The meta-discussion I would like to see in Amsterdam, with a conclusion at the end, is what current DNS operational issues include. The answer should be in the form of a list of potential deliverables, results from discussions on this mailing list and at the meetings. I want a designated individual responsible for each item, and further, a small group of dedicated people which has as main task of moving the discussion forward. The topics are to be synchronised with what happens in DNR Forum, and because of this, you see DN* on the agenda for the next RIPE meeting. The division of labour between the two groups (if we will still have two groups in the future) must be more clear. CENTR today exists as a separate organisation just like anyone else, so maybe the DNR activities should be rolled into the DNS wg (i.e. the two groups should be merged). One of the topics could of course be report from CENTR what is happening, just like other bodies can do it. Proposed agenda for the meeting is because of this: Part 1: Initial discussion about the charter of the DNS wg - What are we doing here? - If we should talk about "operational issues/experiences with DNS", what can be the deliverables? + Topic: Deliverable: Topic-master: Group-members: - What bodies are interesting to have reports by, part from the Topic-masters? Part 2: Reports from DNS-related organisations (2 minutes each): [This is only a list I create from the top of my head...no one has confirmed or even asked to be on the agenda] - IETF: DNSOP - IETF: DNS - Root-server operators - CENTR technical committee - ccTLD registries - Registrars Conclusion: - What is the new wording of the charter? Comments are appreciated. This is _your_ wg, and we are to work together to reach some goal which is of benefit for all of us. paf

3 6