Windows新网dns

DNS-SoftwareComplianceDNS-SoftwareComplianceRiteshKumarDavidMooreColleenShannonRiteshKumarDavidMooreColleenShannonCriticalDistributedInfrastructureMotivationforinteroperabilityNewstandards:ipv6,DNSSECMotivates:DNSsoftwarecompliancetest.
Scope:TestrecursiveresolversonlyMethod:LikeSoftwaretestingPros:Lotsofcontrol(ipv6roots)Cons:NostatementaboutcurrentdeploymentTestMethodologyTestMethodologyTheSetupTheSetupfudofudofudokayakkayakkayakwallabywallabywallabyTestnetworkCAIDACAIDACAIDAFirewallFreeBSD4.
8/BIND9ShellscriptsforconfigsandlaunchNon-recursiveDNSserversrootservers/topleveldomainstestserversfudofudofudoFreeBSD4.
8/BIND4/8/9anddjbdnsRecursiveandcachingresolversPerl+shscriptsfortestsandlaunchEasytoaddtestsandrecursiveresolversTestsummarieskayakkayakkayakWindows(NT)/2000/XP/XP-SP2Todo:PorttestscriptswallabywallabywallabyTCPfallbackIPv6-IPv4coexisttestIPv6onlytestPoisoningtestTestsTestsfudofudofudokayakkayakkayaklargetxt.
test1.
org.
TXT.
.
.
[510bytes].
.
.
TXTlargetxt.
test1.
org.
TruncatedpacketTCPConnection[TXT.
.
.
]TheentireTXTrecordBIND4failsWeirdbehaviorBIND4failsBIND4failsWeirdbehaviorWeirdbehaviorResultsResultsResultsTCPfallbackIPv6-IPv4coexisttestIPv6onlytestPoisoningtestTestsTestsfudofudofudokayakkayakkayaka.
root-servers.
net.
Ax.
x.
x.
xa.
root-servers.
net.
AAAAz::z:zNS.
>0answerrecords>0additionalrecordsdjbdnsfails0recordsinadditionalsec.
djbdnsfailsdjbdnsfails0recordsinadditionalsec.
0recordsinadditionalsec.
ResultsResultsResultsTCPfallbackIPv6-IPv4coexisttestIPv6onlytestPoisoningtestTestsTestsfudofudofudokayakkayakkayakx.
root-servers.
net.
AAAAz::z:zNS.
followedbyaNSnet.
>0answerrecords>0additionalrecordsbind4fails:noipv6bind9/djbdnsfail:0recordsinadditionalsec.
bind4fails:noipv6bind4fails:noipv6bind9/djbdnsfail:bind9/djbdnsfail:0recordsinadditionalsec.
0recordsinadditionalsec.
ResultsResultsResultsTCPfallbackIPv6-IPv4coexisttestIPv6onlytestPoisoningtestTestsTestsfudofudofudokayakkayakkayakApoison1.
test2.
org.
;anspoison1.
test2.
org.
Ax.
x.
x.
xorg.
NSbad.
guys.
net.
;addbad.
guys.
net.
A10.
0.
0.
1Apoison2.
test2.
org.
;anspoison2.
test2.
org.
Ax.
x.
x.
x;addinnocent.
victim.
net.
A10.
0.
0.
1Allpass!
Allpass!
Allpass!
ResultsResultsResultsDNS-OARCDNS-OARC&1stDNS-OARCWOrkshop&1stDNS-OARCWOrkshopDNS-Operations,Analysis,andResearchCenterCommonplatformforDNSoperators-Shareinformation(attackcharacteristics)-Measurementstudiesandtests-AnalysisandOutreachISCandCAIDAare(seriously)involvedDNSiscriticalDNSisnotsecure(yet)AttacksonDNSaregrowingStudyofnewertechniqueslikeAnycastWhyWhyGovernance,InternetandnamingDNSmeasurementsDNSsecurityTopicsDiscussedTopicsDiscussedInternetGovernanceInternetGovernanceICANN/IANA,UN/ITUandUSDoC-InternetvsTelecommunicationsMotivationforNetworkResearchersto-Spreadeducation-ProvideguidancetopolicymakingWorkingGrouponInternetGovernance-http://www.
wgig.
org/DNSMeasurementsDNSMeasurementsToolsforsecurestatisticscollectionRFC1918updatesEffectofAnycastdeployment-IslocalizationworkingStatsonPoisoningDNSSecurityDNSSecurityDLV(DNSSECLookasideValidation)Insteadoftrackingbots,trackbotnetsPopulationmodelstudyofbotnetsKarstNet:Amethodof"sinking"botnetsRealbotnetsizeslookstaggeringThanks!
Thanks!
http://oarc.
isc.
org/http://oarc.
isc.
org/