Re: lwdnsq(8)
Michael Richardson <[email protected]>
| Newsgroups | gmane.network.freeswan.devel |
|---|---|
| Message-ID | <[email protected]> |
-----BEGIN PGP SIGNED MESSAGE-----
Well, I did a different test, which is the more critical test.
First, pollute the cache:
marajade-[/tmp] mcr 1001 %dig -x 216.240.42.209 ptr @ns.istop.com
; <<>> DiG 9.3.0s20021115 <<>> -x 216.240.42.209 ptr @ns.istop.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44980
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 8, ADDITIONAL: 7
;; QUESTION SECTION:
;209.42.240.216.in-addr.arpa. IN PTR
;; ANSWER SECTION:
209.42.240.216.in-addr.arpa. 10800 IN PTR road.toad.com.
;; AUTHORITY SECTION:
42.240.216.in-addr.arpa. 604800 IN NS ns.idiom.com.
42.240.216.in-addr.arpa. 604800 IN NS dns.syzygy.com.
42.240.216.in-addr.arpa. 604800 IN NS dns.fourmilab.ch.
42.240.216.in-addr.arpa. 604800 IN NS dns.fourmilab.to.
42.240.216.in-addr.arpa. 604800 IN NS ns2.idiom.com.
42.240.216.in-addr.arpa. 604800 IN NS toad.com.
42.240.216.in-addr.arpa. 604800 IN NS syzygy.com.
42.240.216.in-addr.arpa. 604800 IN NS ecotone.toad.com.
;; ADDITIONAL SECTION:
ns.idiom.com. 1024 IN A 216.240.32.66
dns.syzygy.com. 69530 IN A 216.240.42.1
dns.fourmilab.ch. 69788 IN A 193.8.230.138
dns.fourmilab.to. 69921 IN A 193.8.230.138
ns2.idiom.com. 1024 IN A 216.240.32.74
syzygy.com. 155868 IN A 216.240.42.129
ecotone.toad.com. 12599 IN A 216.240.42.33
;; Query time: 158 msec
;; SERVER: 66.11.168.199#53(ns.istop.com)
;; WHEN: Mon Feb 3 22:04:39 2003
;; MSG SIZE rcvd: 360
Then ask for everything:
marajade-[/tmp] mcr 1002 %dig -x 216.240.42.209 any @ns.istop.com
; <<>> DiG 9.3.0s20021115 <<>> -x 216.240.42.209 any @ns.istop.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10837
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 8, ADDITIONAL: 3
.... Note lack of *AA* bit. So, there may be some change of doing this
with some additional effort. But, I agree that it isn't as good
as I'd like.
;; QUESTION SECTION:
;209.42.240.216.in-addr.arpa. IN ANY
;; ANSWER SECTION:
209.42.240.216.in-addr.arpa. 10793 IN PTR road.toad.com.
;; AUTHORITY SECTION:
42.240.216.in-addr.arpa. 604793 IN NS ns.idiom.com.
42.240.216.in-addr.arpa. 604793 IN NS dns.syzygy.com.
42.240.216.in-addr.arpa. 604793 IN NS dns.fourmilab.ch.
42.240.216.in-addr.arpa. 604793 IN NS dns.fourmilab.to.
42.240.216.in-addr.arpa. 604793 IN NS ns2.idiom.com.
42.240.216.in-addr.arpa. 604793 IN NS toad.com.
42.240.216.in-addr.arpa. 604793 IN NS syzygy.com.
42.240.216.in-addr.arpa. 604793 IN NS ecotone.toad.com.
;; ADDITIONAL SECTION:
ns.idiom.com. 172792 IN A 216.240.32.66
ns2.idiom.com. 172792 IN A 216.240.32.74
ecotone.toad.com. 109615 IN A 216.240.42.33
;; Query time: 56 msec
;; SERVER: 66.11.168.199#53(ns.istop.com)
;; WHEN: Mon Feb 3 22:04:47 2003
;; MSG SIZE rcvd: 319
What's annoying, is that if you ask a cache a question about something
it knows nothing about, you do get everything:
marajade-[/tmp] mcr 1004 %dig -x 192.139.70.20 any @ns.istop.com
;; Truncated, retrying in TCP mode.
; <<>> DiG 9.3.0s20021115 <<>> -x 192.139.70.20 any @ns.istop.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53716
;; flags: qr aa tc rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;20.70.139.192.in-addr.arpa. IN ANY
;; ANSWER SECTION:
20.70.139.192.in-addr.arpa. 28800 IN PTR bluepaws.mimosa.com.
20.70.139.192.in-addr.arpa. 28800 IN TXT "X-IPsec-Server(10)=192.139.70.20 " "AQORWcTLt7DfQ88a752yDC+2qrNXfkgM7VfeJ91Llt1ujdMPr8re8t/6H6Awe2Y5Ro0bQcEPt9spaqZKAwvX+mP7qZSDQUzv7qmyBe0HsjKgdL3M/A47dRzsLDj5XPbUxGw4K5GkLKRcVr4M/YOu8OAtlVDIxtmw6OCQ0ruJF6V1Onm7tVb/duZD3QNA9deNABkLk1WosisK9ot4xbVLpQo2K4Ror0fQ8Ghy3kJ6I0g1m8PJOdHQWAD2Uq7fPit" "M1n9u3ZcKlLMN+RSLyyKpwiakjUtJ5fiDMv/r9QsmVIOnb+Hk/ilhzpdYGNJUQ9qCcY06nPCvpO9w95tnMvijRWgd"
;; Query time: 54 msec
;; SERVER: 66.11.168.199#53(ns.istop.com)
;; WHEN: Mon Feb 3 22:07:07 2003
;; MSG SIZE rcvd: 469
] ON HUMILITY: to err is human. To moo, bovine. | firewalls [
] Michael Richardson, Sandelman Software Works, Ottawa, ON |net architect[
] [email protected] http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Finger me for keys
iQCVAwUBPj8ucIqHRg3pndX9AQEKGAQAl63z42i3lXQqn11Daeo5DMfoYuOCHxdB
UrkaekTA/8W7AgEnHGt7egWM6AG4czIdfNowyk6m8CLzhXC31qbbQCE/amVekqjM
Tavq5RbiBTBp9jfZLwa3ddRwvE4UHgRt1tjZrFNdULFMpUNKHAzMK0LoR7ECJAGq
Nw7bqTMlnt0=
=ryVO
-----END PGP SIGNATURE-----