Tiny Core Linux

Off-Topic => Off-Topic - Tiny Core Lounge => Topic started by: aus9 on April 30, 2010, 04:37:10 PM

Title: Domain Name System Security Extensions starts May 5
Post by: aus9 on April 30, 2010, 04:37:10 PM

hi

according to this link

http://www.itnews.com.au/News/173412,warning-why-your-internet-might-fail-on-may-5.aspx

includes some tests at bottom

Title: Re: Domain Name System Security Extensions starts May 5
Post by: aus9 on May 03, 2010, 04:27:45 AM

just to add, I do not have java.....JRE installed on my system to run any of the above tests

so I cheated and booted Knoppix which does have a JRE.

(sob) my router's results were not so good

Title: Re: Domain Name System Security Extensions starts May 5
Post by: lucky13 on May 03, 2010, 08:15:30 AM

Most people don't need to worry. It's nearly not as bad as the itnews link (or The Register) suggests:

Quote

"The worst that is going to happen is that a tiny minority of users behind mis-configured firewall or middleware boxes may experience some performance degradation when their clients have to attempt alternative paths for resolving names," says [head of engineering at root server operator Internet Systems Consortium Keith] Mitchell of the May 5 upgrade.

http://www.dslreports.com/shownews/No-DNSSEC-Upgrades-Wont-Break-The-Internet-Next-Week-108154

Title: Re: Domain Name System Security Extensions starts May 5
Post by: combo3 on May 03, 2010, 08:17:36 AM

FYI, the 'dig' command referenced in the first link (https://www.dns-oarc.net/oarc/services/replysizetest) near the bottom of your source is available in the bind.tcz extension.

Title: Re: Domain Name System Security Extensions starts May 5
Post by: aus9 on May 03, 2010, 05:46:02 PM

hi

silly me....I tested my router and opendns.org.....as thats what I use.

then today I enabled tcp and udp for port 53....redid test.........same "not enabled" result

2) then changed to my ISP which maybe aussies and kiwis could try

202.134.255.243
202.126.109.232

and bingo

(http://stashbox.org/882332/edns.png)


3) Now to look at bind thanks combo3

Title: Re: Domain Name System Security Extensions starts May 5
Post by: aus9 on May 04, 2010, 06:52:36 AM

hi

well not finding any /etc/named.conf to enable edns stuff so went looking at the link from lucky13

also I found this blog which seem to provide some comfort and explanation FWIW

http://blog.internode.on.net/2010/05/03/dnssec-and-what-it-means-to-you/

I will use a similar process to check their dns later.

2) for aussies or kiwis its

http://www.internode.on.net/support/guides/general_settings/