Domain Name System Security Extensions starts May 5

[aus9]

hi

according to this link

http://www.itnews.com.au/News/173412,warning-why-your-internet-might-fail-on-may-5.aspx

includes some tests at bottom

[aus9]

just to add, I do not have java.....JRE installed on my system to run any of the above tests

so I cheated and booted Knoppix which does have a JRE.

(sob) my router's results were not so good

[lucky13]

Most people don't need to worry. It's nearly not as bad as the itnews link (or The Register) suggests:

"The worst that is going to happen is that a tiny minority of users behind mis-configured firewall or middleware boxes may experience some performance degradation when their clients have to attempt alternative paths for resolving names," says [head of engineering at root server operator Internet Systems Consortium Keith] Mitchell of the May 5 upgrade.

http://www.dslreports.com/shownews/No-DNSSEC-Upgrades-Wont-Break-The-Internet-Next-Week-108154

[combo3]

FYI, the 'dig' command referenced in the first link near the bottom of your source is available in the bind.tcz extension.

[aus9]

hi

silly me....I tested my router and opendns.org.....as thats what I use.

then today I enabled tcp and udp for port 53....redid test.........same "not enabled" result

2) then changed to my ISP which maybe aussies and kiwis could try

202.134.255.243
202.126.109.232

and bingo




3) Now to look at bind thanks combo3

[aus9]

hi

well not finding any /etc/named.conf to enable edns stuff so went looking at the link from lucky13

also I found this blog which seem to provide some comfort and explanation FWIW

http://blog.internode.on.net/2010/05/03/dnssec-and-what-it-means-to-you/

I will use a similar process to check their dns later.

2) for aussies or kiwis its

http://www.internode.on.net/support/guides/general_settings/