2,787 reputation
1015
bio website bortzmeyer.org
location France
age 53
visits member for 5 years, 2 months
seen Jun 19 at 14:13

Jun
19
comment Is it possible to create DANE TLSA records when the DNS server doesn't support it?
It's not the DNS server which does not support DANE/TLSA (all of them do, at worst as unknown data types), it is the Web interface of the DNS hoster, I presume?
May
8
awarded  Yearling
Aug
2
comment tcpdump capturing tcp resets by host
You ommitted the really important part of tcpdump's output, the source and destination IP addresses...
Jun
29
answered Rotary.org DNS Resolution - Server Failure
Jun
29
comment Rotary.org DNS Resolution - Server Failure
IntoDNS is a quite poor service, with several spurious errors. The one about missing glue is specially stupid, since the name servers of rotary.org are not even in the same TLD as the domain they server. See bortzmeyer.org/tests-dns.html for a comparative analysis.
Jun
17
comment Do we need to rely on a third party nameserver for resolving nameservers?
Not to the DNS root, to the parent zone (.com if your domain si example.com)
May
26
answered Testing DNS configuration of domain by using hosts file?
May
24
comment DNS unreliable for local server; Using IP address works
There are many things (see Travis' excellent comment) that may make the network work 95 % of the time and then fail without any appearent reason. However as mentioned by mfinni and joeqwerty, failure with the name and not with the IP address is impossible (providing the name resolves to the same address)
May
8
awarded  Yearling
May
2
comment Dnsmasq not distributing address as dhcp server
I did not downvote so I can only guess (downvotes without a comment is the biggest StackExchange plague): you do not explain how you tested and what were the results, apart for a very vague "It looks like my ip are not assigned by the dnsmasq dhcp server..." Log entries, tcpdump output, etc would help us not to resort to crystal ball. For what you say, it could simply be that dnsmasq is not started...
May
2
answered How to debug SSH “connection timeout”
May
2
comment BIND DNS issues, and a request for config opinion
No, that's the wrong way: by "making www.example.com a CNAME that points to that A record [sic]" you also inherit the other records such as NS. You should add the IP address twice, for example.com and for www.example.com.
May
2
comment SRV DNS Record with Custom Ports. Am I misunderstanding what SRV is supposed to do?
Actually, most protocols do use SRV records (for email, SMTP use MX - a ligher form of SRV - but IMAP and POP have RFC 6186). HTTP is the biggest exception (but a very big one).
Apr
28
comment TCPDump and IPTables DROP by string
It is not clear to me what you are asking for. Your iptables command looks right. What are you missing?
Apr
24
comment re-parked domain at godaddy and assigned A record, domain is not refreshed for everyone
guy schaller : impossible to know with so little details. Give the domain name and we can run dig to see the TTL, the state of various caches, the synchronization of authoritative name servers, etc. Otherwise, we can just guess.
Apr
24
comment re-parked domain at godaddy and assigned A record, domain is not refreshed for everyone
-1 because the duration of stay in the caches is not controlled by the cache but by the authoritative server which sets the TTL (time to live).
Apr
24
comment re-parked domain at godaddy and assigned A record, domain is not refreshed for everyone
Bryan : the typical value is much shorter now. 48h is now more an urban legend than a measured fact
Apr
22
comment Creating custom nameservers when registering a VPS?
The test in 2) only checks that your name servers are OK, not that they will be queried by the world resolvers (this is step 3)
Apr
21
answered Creating custom nameservers when registering a VPS?
Apr
19
comment Getting packet rate with tcpdump or iptables
Correct but iptables does not give you directly the rate. You need to call iptables -L -nv at N seconds interval and then divide the difference between the two measurements by N.