Nameserver returned invalid replies

Just out of curiosity I tried using Bill's list of "all Comcast servers" 
and as expected they don't respond for me since I'm not on Comcast at 
the moment. But I noticed that the status for all of them is "Nameserver 
returned invalid replies". I saw that on a few in the new list from 
Steve too.

I'd be surprised if all those Comcast servers are truly broken, I wonder 
if what they [and the ones on the new list] are doing is responding 
"neener neener, you can't use this server" or something similar. That 
would certainly make sense for some of the other servers in the new 
list. And if it's worth trying to itemize the response somehow, perhaps 
actually displaying it on the Status page if it's text? Although I know 
it's a bit late for changes. :-)

List of Comcast servers in case anyone wants it, Bill posted this 
earlier:

68.87.64.146        nrcns.ndceast.pa.bo.comcast.net
68.87.64.150        cns.inflow.pa.bo.comcast.net
68.87.68.162        nrcns.s3woodstock.ga.atlanta.comcast.net
68.87.68.166        cns.s3woodstock.ga.atlanta.comcast.net
68.87.69.146        nrcns.beaverton.or.bverton.comcast.net
68.87.69.150        cns.beaverton.or.bverton.comcast.net
68.87.71.226        nrcns.chelmsfdrdc2.ma.boston.comcast.net
68.87.71.230        cns.chelmsfdrdc2.ma.boston.comcast.net
68.87.72.130        nrcns.area4.il.chicago.comcast.net
68.87.72.134        cns.area4.il.chicago.comcast.net
68.87.73.242        nrcns.manassaspr.va.dc02.comcast.net
68.87.73.246        cns.manassaspr.va.dc02.comcast.net
68.87.74.162        nrcns.bonitasprngs.fl.naples.comcast.net
68.87.74.166        cns.bonitasprngs.fl.naples.comcast.net
68.87.75.194        nrcns.summitpark.pa.pitt.comcast.net
68.87.75.198        cns.summitpark.pa.pitt.comcast.net
68.87.76.178        nrcns.sanjose.ca.sanfran.comcast.net
68.87.76.182        cns.sanjose.ca.sanfran.comcast.net
68.87.77.130        nrcns.westlandrdc.mi.michigan.comcast.net
68.87.77.134        cns.westlandrdc.mi.michigan.comcast.net
68.87.85.98         nrcns.cmc.co.denver.comcast.net
68.87.85.102        cns.cmc.co.denver.comcast.net
-- 
GRC Newsgroups/Guidelines/No Regrets:
http://www.imilly.com/noregrets.htm
 From invalid, Reply To works.
http://www.2kevin.net/munging.html
0
Kevin
9/15/2009 7:09:00 PM
grc.dns 1176 articles. 0 followers. Follow

12 Replies
5125 Views

Similar Articles

[PageSpeed] 52
Get it on Google Play
Get it on Apple App Store

Kevin A. wrote:
> I'd be surprised if all those Comcast servers are truly broken, I
> wonder if what they [and the ones on the new list] are doing is
> responding "neener neener, you can't use this server" or something
> similar.

Easily tested so I did :-

nslookup kellybk.com 68.87.64.146
*** Can't find server name for address 68.87.64.146: Query refused

-- 
Brian Kelly
Home Page http://kellybk.com
Species Race http://speciesrace.com 


0
Brian
9/15/2009 7:58:20 PM
On Tue, 15 Sep 2009 in grc.dns, Brian Kelly wrote
>Kevin A. wrote:
>> I'd be surprised if all those Comcast servers are truly broken, I
>> wonder if what they [and the ones on the new list] are doing is
>> responding "neener neener, you can't use this server" or something
>> similar.
>
>Easily tested so I did :-
>
>nslookup kellybk.com 68.87.64.146
>*** Can't find server name for address 68.87.64.146: Query refused

Thanks, I couldn't remember the details for testing. :-)

"Query refused" is the important part I suppose, because that's telling 
us that the server is probably working, but doesn't want to talk to us 
for any of a number of reasons.

I wouldn't think it's worth a modification of DNSB at this point though. 
Probably. :-)

-- 
GRC Newsgroups/Guidelines/No Regrets:
http://www.imilly.com/noregrets.htm
 From invalid, Reply To works.
http://www.2kevin.net/munging.html
0
Kevin
9/15/2009 8:42:08 PM
> Just out of curiosity I tried using Bill's list of "all Comcast
servers"
[...]
> 68.87.64.146        nrcns.ndceast.pa.bo.comcast.net
[...]
> 68.87.85.102        cns.cmc.co.denver.comcast.net

now, I became curious, so I ran a "whois" against the first IP
and found out that the netblock it belongs to is 68.87.64.0/18
so, knowing that I decided to run a quick "reverse DNS scan"
on the network using "fast-rdns.pl" [1] with this cmdline

fast-rdns.pl -q 68.87.64.0/18 >comcast.txt

it didn't take too much and looking at the resulting file there
are several hosts which looks pretty interesting; probably
most of them aren't public DNS, yet... they may be of some
interest :)

So, for the curious ones, I'm attaching the zipped list here

[1] http://www.spamshield.org/fast-rdns.pl




begin 666 comcast-68-87-64-0_18.zip
M4$L#!!0``@`(`&.',#O+YLU>[#@``-W1`0`+`&$`8V]M8V%S="YT>'131$P`
M7 `````(`-'"ZVUC9&!I$&%@8%!A@ `'(&9D`C-9%8"$`I#-R KABP()J?K;
M\=P.W^RK*B][,0#EF!AD&!C!TB(,_QGE&1@A'# )`%54#0`'.OVP2M<"L4H'
MT[!*I9W9DNPXDI[O9:9WZ!>(-&+C<ME3W6J3--W64HU&NI,Q2&9D5 4C6&1D
MY#GS]*)C(4#FPM]3UF5==4[X1P?@#L"QY^5363SE^DG\Z4^/RT%EXNE\?;[<
MWIZ&^NEX>VIN?5-/]Z=K=__/_RD/PC(('U['3#U=VZ8CH:\0E2(:0LR?_G1N
M)RQ%^9_^-+R<+X>FO6) D0`2`<H$4 A0)8!&`)$Y0AR&]J49($0$I!TZ+.-"
MI@B4=:$<(AD)TP'!$V92!$N8-[MB)*P(")ZP,D6@A,FYQ,Y-#=8F[82Q+P=/
M;R^'^_-]`%44&PK3-;MP,\X:VN[ZZ,8_WKI9I)FEC[=K]UD])R<^W^_B,*$F
M42(@5+Y0W5+2(9*A104$U^*=6./NI4Q 8/=2>8I AE&%RXMB9+\,")[]V?S'
ML?L/+!MZ+M]IZ+KV\#I<;G5[F#&DE==SB;UU1U!)\/Y+CWZ^B(3$B-)GY%(?
M42651^YS#0'5&"JO:_LX#'>PCS,Z(2 _,282%["(3;YB,#US(?\&?C\W-A*0
M609)YU9:B(SB!LP:>9$RF#7RV>CGRPV/'_(J`E 9%5D$H.I7B A \4,A'3"\
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M0I@4`MU7>%,VXY(K`5M2O+<D`RX_@L%DR^PC&*QUTK8P`NLK!(V+K?0!#<2%
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MGR]S-L!RK2(`9=H&>7,FYL8`$A>+.)8@"ML"@"5(.0!L#2AX:X;K^5 /F!$H
M?@L`5'=I&2(`6):K"$!9IK#/E@_40%#89Z6A=IZ"/KCL:4&$A!66$.VEL808
M+PT)A\%9VW,'6,:NGYR;#C,6193G$6P]*9 D8:@P*7X<AWM[!$,($<2QK_MY
M,JHJ;]WQ?NY&$%3O02R!?MX,[IR,GT"'HQWCPRAQ>)P'R-3&!U.2181$8>55
M1$"@@,TRGJ8XD8OWY*9:IC&M#:&V+,_6$&267*PA+,J5:PC*4T[+A5US&R90
MWBSR6*)FXW?/`[*08>R:7#N UJ!%J;;IZP'L(^R"5 /*&BL+Y="N0#7@X,*V
MDYCCT$*0C=>@+Y<ANL.^/:?CQR#D[U@6:=FCZ=O'N0,CT[+RJ3'0P&C.Z7-W
MR X,1%A$<) 0+4.N2$L<,4T8HM,T88A;[V*5;95;!NYNJ\+)HSTNK:-X>2P]
ME1NR8$,X6O^P&P>F<0"#"[OLL3 29%3"*) I?3Q@NQ$H-S[OV(C4#J/KIKG?
M;I<)'==3L/UVF>SX!67,_R^#C=WM?/X;GI7"BX-?+[TXYE@T+K?BF"WLI#Z)
M&TQ<>/$<$Y=>O,#$E1<O,7'JL^_UZ7P]@45/0_- @/-#>20P`] X^&6N;8?'
MY:"1?3LFK'>0.#ZOZ%<\`H3,+.9AKE,\-7U#FQ/=7L5/A%<;EQ=D5N.W-G[$
MK'8N2XQ9MBXCB9KM0;_[O4<(422$A(@R(11$5 FA(8)F-DD@[%^&&!$8MU\2
M8F3*8/FG!IH$)"=M.C",M)F4`=/F'4!Q]!0I`^HI`\,H`^\&FI$VF:4,EC8I
M`H.G37ZPXQ2JG5*OMEY"NLQJ[R6$Y)O-EQ!4;'9?0E"HW797+%8$543 -HU:
M].-C7'9V(RFC!MTQ;M<QQ$C'2(X>%1B&'NT8Q=%C`L/0DSM&K_7L%/;'T->*
MBL P$K?>[(REK7*]F\+$:4)V:$;,_VD^EH0/H+CTXEA%H2G961P4UDX838KQ
MXN#79V/50P]GM/3BX-=I*6N"OTZSJT-?L\097Q?^ZUC:[5K^:P-^>SEH`TDO
M)VT@::KLM[;N[: 1B_OR@!PO==NA-8IF.5,,C3)GI[C:+;M0=BHGC64^]YUX
M<LX(PL0&`[512#>@Q>6.$- )`NC;>3APP CZ_1D"#X'VR-W\"C.8IY,$*865
M&!TG2"FLN:<S!2F%!?:T"[L_W0^G51SS=5G0-!XQTW1!.PJ:Q@N(!A'E9\S0
M%H!F\CR E?.R]YCC/<OF8X[WI+N/YR3Y-3ILX"7>D>"0(.P['J>?UP;-7KH#
M-NA3X-#-C?"EXA1GLM42&^NM]UIBS'JS)<;X7928\+*-$A-?]E%BXB9L=L3$
M\[C;$0.*N-T1&SOGZ?Y[U-!Z=3H`K3BZC!O)K3]*N.;HC2?CI,G>D6#1&/&.
M!&N/4>](`Y+Z'9F#I'E'%B"9OR-+@"SB]D5$>+5_$?*S8KV!46+,LH,12=2R
MA1$17O8P(L)^$Z.N(6F_BU$?(6F_C5%C1J+MU<]M@Y8YS?3!H\8B3/+1QB4H
M-50S;NX4$O9]'0#0_G89Q0)H#G(+7.IA$*@.O[,1RO&RM1&2=O,]?D<$5*_L
MYL;I#15?MC="TC*L+$+2-'E[G5YZ].LZ;GCB1%*%G;.[_SS1[Q]*I\<H"CM9
M]WPY7^^8]&RPW^L>LRY%/&X=&)&F@,>M`D/2(FR\@J1I[\G@MWY.4WL$F]AH
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MR?YH'9/U`>K^K\-E"BMS/%@$V*T:\6#I8/DMS2K W]&L':R^I=D$^#N:RV6)
MBL=5RUH5BUO6SWB46%:O>)Q<EK%X7%A:XU%Z67CB<6994N)QN5];XE$TZ+ZW
M/Z_L+IHFB=SD- \389V*A_E6R.T#X$0P1D62%_O07N:D;' P[!!;9@AYL%A/
M%/+@>-F&S;2;]6-V[.K]-]C!@7[_#<7]AGG_#6YLI?+WWS#<;Q3OOY%SOU&^
M_T;!_4;U_ALE-^[*-M\0?/_0XOTW6/Y1Q2'0L:OG@=+]=GVZC4]'_Y\?,YL!
M$(/<C'\8I-]'$X8_#-+OIO&#'P;H=\?XH0\#+!*0E<DR`14'K!)0<T"Q[+=R
MT2P'76V[8A60D"G**B*Q;,+B)UBG^[=X"38IRDMP'G9S\1-<I!O!> DN4Y27
MX"KL\&(G6&;IYC!>FR)2E)7@L,TP!-J<]FC933QQ\ZI6FXIY6F78O\O7JM*M
MOSRMFVV%'-2/1EA,M8Q@.,U\MHQ?.)18(GP.)9?XGD,I']US&!T\E&UP;=)]
MSBRKZ3R@;*UQ2,&!E@$%!Y+OYR4XN.\.W&B$`^H(LA)<I&,15D_K&\=#/'O#
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M#3"62 HE3]U!'P2',NZ2`'70)8R)Y"SJ2W?II^=V;!OYU-/IU>DS[Q/O#J5R
MV.WA5 Y+/=G+I0^>Q6+C`5<.E7N-?G,\!RT2E)G/TJ'+L50.6P76'W_DL/:J
MWP5F)IJF< B6WTDU3>(X^#O)5BG,3;9W*O4MS2:%N9KS`'^GP%+W4DRV3%C-
M9.T-<]=Z.5/):C>R`/OS?BQ8.%A^2[,,\'<T>_^RL[Y,(],>NF6$QR.K#PX+
MLUI:[?*LOE-@%/,[^!L%EBPX\[BXX,SK%Y8#FRPJ+CCSN+C@S..6LYPL*BXX
M\[BXX,SCPH(SC[+#L\?A>FN[_O9@-Z1QCHB'+;-$/,SW-OH[+:]1`?Y&AV%T
M"G.3[>ND_DZ%IK,-#OY&A3:AMW'G]5EH&5%N!YGY>"29Y6)^0&P^P(YIJO5$
M&3.HR=9394Q:K"?+F+1<3Y<QZ=4$H>'2JRG"G$NO)@D++KV:)BRYP>#LK?PQ
MC9WQX ]G[%S'?7KPHT[A.+:^]1B1I58F#Z[68U?KI_-EYN?6]W3[!)#K%U1!
M:C5 -"AEV]7S,ND`4LN@$)3/O18W' 2A(H$D"I4)I%"H2B"XO-V@[]R$T2:*
MB8"Y;A#%9(K!Q>&&>.=&,A.I`\9+I$DQ/)'>/30SD1LL2.^#10!YN2M3#,^=
M]R[#RYW,`L9*I!0I!B=R<U$22FTO/D*Y[=U':!-G=PK<QS"(1C$1,!?"H9AT
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M-4WU-(Q/C_JII3ON/T96`TFU<$U#W+%N/\'4>OR)8G[:/ PEX53ZV3F_-QS&
M_+R<'U/"6)%@$L?*!%,X5B68QC&Q6O!AY$Z(%&3D3\@`ND '!U6Z0L1)JDY!
M3E)-`+E)S<,R[<0$BW1]EV'^L&(HV1JK=&F6H5%F87&4J5&*=$F6HY'ZKY'5
M+-F]>3T+R=-E-0Y8I"##RV090*:7482RA&AKZHLF-UO&8[ B)981&<[X:U09
MA%I&93BCEW$9SA@_,L.)966&:2%5I$LZ'(UE"G(R5X7E*V:MU%FZ[L6HE=IW
M!&X,A6,R8HS\Q3%A0/: 94R(`A]L44<#$Q..W=^[Z9ZHW./LS:CMJA[OQ23"
M$V"^='+T[W8]WZFHKZ?IZ?GR=*V'2S=]0KW;DLA@WVU-9+#^*'[<HLA@_4G\
M< 20@^8>]8<`.6B1H,S,E@FJ>&B5H)J'BN6*!W_RBP6OKGA@%I60*<PL++%<
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MWDL(-Y,^C,[SG!D`A!#:DQR=5)!T)_8W"M.>%TY9EE[M6&:QVG#NO#Q+!'+)
MT[=3??WM-MD#U/-_/H_U]1-B&XPEW/.Q_@3:1F(01#M'9[$E#$-3N.PAAXG<
M:_(1&(H5"29QK$PPA6-5@FD<LX]LS*)+! :#(H"^N81!F8*,@J&I7@(E.ZDZ
M@-RDFA3D)-6[C&)K+%*0H9$BL1CS015(JJ"+69X?3.*"]7RY:!@33R)2#$C"
M40R(B\P@$%>802 L+X/BOAIKKDUT%D"FQVF1@@R/2WIW&(F].XQX)_6=+(SI
MB'&T?; OE]',;%XDPTS^[DDR%(LS1=-OX89A/*W5EN8T;\G39)Y6'%IL:4Z'
M9>26-AQ:;>F<0^LM77!HLZ5+E"Z2;9CT',JEOM(AP*?^//_3O)Q/GW*;@(P'
M;P(S'NP/EH0`C0<O41H/R[U.%ZKQV")AN7DM$U8QV2IA-9,5R\DDUU\PZ=4!
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MZ=>XG .3QI-A50<&<P^&=1T8+!)0<L R`14'K!)0<\!O;I1Q3UVZ91J_.,UP
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MBD@(40YY/8,J*%R9J_"!!DP0H)V"_MJ &HP#SOT``G,U_=\S,"?I>+^Y"XH!
MJG1J#O78O*!,M6*P`J:QPO@FFO[^?!^F\8%!M/'H33*AN:@?4W_\_14M.5JR
MNU];5#IWTEB^:;SR.$]T;3(B30U&WS2WZ3& ODYO%HUGN&I0>]"_W@_#[7)!
M[4WCD 0",VY6D,*@? 5I#"I6$%C2L^/?ING-KABB6:I2!LL116*1P3)$<=C\
M-_6UOOR<[@)F_M'=_^P8#*%3QZ?#'[>I/XUHNZ=2!FQ;Z8QQ<[ Y0M50C3P=
MFI?YKU%D]H+[>5;1]1.*E+[N@/F8S?_\=GH]T_PZU.9G!+3=`P9HAN(!IIZ&
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MET;A:-J2&BLT.'^4UK\"9-(*6(),4@.%`9F5@4!WHUFG"*&ED*<0FKPBA7(0
M*E,(+? JA< 2I^DE6N,2YM FI??U,,/NB8J41JFY_/[]7P,%NK@_!"Y%SDF@
M/P#N*32!RQ+Z-,+3E\OB.3%@%5R6S8D!/799+B<&=%B5)PSHKZI(&-!=:2YG
M84!OM0<B`^.<=0$^G5S.$J8")Z1%9-"F6"=^@#;%.O$#`?J!3OQ @'Z@$S] 
MFV^=^ ':K.K$#P3H!SKQ`U& -DW\``S2[=K@PH!^8!(_`*-TNP*X,.AR1N('
M$O0#D_B!!/W )'X@03\PB1] $Q7AA7E99JLF^ZMV-+PL[QF),73>[7RY_=_N
M&6MYW3/G@9 8(2.A,$(YHAUZ-%6S*>UU'!T*& >,L(9\`;!LRW"UR-#<KO=Q
M'MA.V'RB>_J:T.YZVJR[?,WE_A:5[:SWE^G,90H=9@3,8*Y6VM0W(*L-!/4[
M4&.@>0=B=3#/WX$Y!A;OP (#2P?V\\^']@^TXN?5&@/K?N&Q^L>55FO%<<*X
MTK49AU-+<[R/0S=,\Q^O:&I+\3$.IKJ4'^-@%2G5Q[@&<?TQ;D#<?(SG()Y_
MC!<@7GR,ER!>KO'[2W>O8=W51S"HN=*;]A"KP)4O[7J89O%GU8H!U)=O0 F"
M?N]B?955=CB]@9V='VI5G,Y^&6I5K.[>'5^MK^T9[/7<B54"P,[>[DRT`-@/
MTWW!KT,/2M.,R/,]6<K;D:>M(O?I](JF9L[NL6X:'- +`$<>)B)@H5($&1"D
MNPQO3TOCGPP#O".\/.T9C3&T2;COI_$AL@Q*F(F @( \`A("B@A@955&0$- 
M%0$#`11F!R+'"!&)`B-D)$J,4)&H,"*:6V#F%M'>`K.WB 87F,%%M+C +"ZB
MR05F<A%M+C";RVAS@=E<1IL+S.8RVEQ@-I?1Y@*SN8PVEYC-9;2YQ&PNH\TE
M9G,9;2[!%C':7&(VE]'F$K.YBC:7F,U5M+G$;*ZBS25F<Q5M+C&;JVASA=E<
M19LKS.8JVEQA-E?1Y@JSN8HV5YC-5;2YPFRNH\T59G,=;:XPF^MH<X797$>;
M*\SF.MI<8S;7T>8:L[F.-M>8S76TN<9LKJ/--69S'6VN,9N;:'.=8X&2B4;7
M!8@DI56"2%)<%8C$\C(9B,0",P)#<EMB-!.&!7TBB*-1HEP`S+'R6$&,!/,0
M:X@!0^H\5A$#1M1YM+HQ&+(<F9M#]\L19,*PTS*B0"F14B5*T8S^&SH.<8M[
M;^@0Q XY;TT]/&XM:'R[K-<-)[H%HP/#4NJO`H)JL;<-7!^'^<=#NF%W)T-:
M!>[<UCV.Z14F4<Q$K'G!M>4K#-96I(E$H3+5A4+5JO01*CRU+3,)S\6$=[8]
M(S%F-M5)'NG@$M3 V=>U`R A((^ @H B`AH":#[P.C'R4$4`RX.]3;L;'X?N
M?@%UV$-7W6!W0;5HPH0WQVUL4:)P>8%5R) 5G) N4;\_>I10CF@;%- +@!G$
MGCNZO5UHP<> -:JTFXLNMU,+`O;5S8D**\O &DB72+6OF:FA7% G9L6/F+CT
MXIBT<M(YF!;MQ<&T&"^.2>?V5-78-6"5IB&6!\#<E@L`)JF*2>HA@@98(4T@
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M`\\4*",B4Z),TNY5*!,;/I&A3&SY!-HBR74+`=?S,&.?E8S)R67&WE&HS]*<
M1]BKUW:7>XWK4UL2UJFWI$))LR4U2N:1[#BY+-8<G,=RS<$YK-8<FC^:/%GO
MN41S2),H:Q+-HY9;$LVE5EL2SJ?>D@8ES99$VS*=^,YX>[V[^]1!MGC/PN5;
MOF?A$J[>LV@9FVQ;R] R-F)+HF5LWK5#:*]AWK5#:-]A$E]B;6Y7;G/GMW:V
M*[?+\UO;VK5]&^PQ?/*C;1W/_8>_&D)_^<L_#K_\S\-?_OJ/P[\)[)H'\V0O
MH:!+.1'AL'[G'YA D"I%)(38U[O0)+G'NFAYD)$H]T;7`H')"LNYO[?85*[Q
M[W&%W(.,21D-,<J=0Q95Y9ZS`YS-O24>(0E"_@" 3>&E1W7I;(V!VK2_@=/.
MB0ZPLGQ%H;J*%:5 JEQ1&J.,/[XRC<W+L3T>K^E2WPZJWZ-@#HV):-,>:X[6
M_#V*:BU6Z!M':_D>1;56"7IN?S"TYME[%-0:3NXY]'KB:)7O452KN^982L.H
M_7F10J FFI(>GN_-[2+!WD4L`-;(TG2T![#FDF:C/8"UE307[8&,"Q@,*&Q'
M?3A?[T_'TQ_U9YTIK<$]-V"71;.2RP-+D+&J+'E)"B.L3P@PFW3!C;NI'9(.
M@4"XH1V+!+(5A<8/8D6!_:Z]%@>-.K)E;Q<C,SIAT*R8A$$S$K9T+1>N8S&1
M/_1FP'KA[LWOA_'VXR<(J 5 R\QM87<(&J:9B( EYC:Q.T2#2!$1`R)E1'(0
MJ2)2@"%G%I$21$1$*A")MA>@N^AH?0%:7T?K"]#Z.EI?H$%ZM+X`K:^C]05H
M?1VM+T#KZVA]`5K?1.L+T/HF6E^ UC=\ZR<(U+[D7PV&<]I'.8S8U>$Y[:$D
M80D)4\S9UQ?LRY43QKYL;^F8I14F+9RTQJ2EDS:8M'+2.2:MG72!21LG76+2
MN9.N,.G"&P?S(!%LB1E3>&L*S)S2FU-@]I3>G@(S**UB/-_&P]L1='):PO `
MF'ZS`& .\@4`\U L`.:7M,G4`YAK4LSB`<P[:?'%`YB#4I S#!-N!PIR/(#9
M@4(<#V!V^&HB,+>;1:FU`[]5.&G,H-JV&],;EC'C=GR^W<;?I^;V>D<&(;G=
MSS<]!E"8CIC0MVFC^/G1@92?5KJ-YQ.Z!2&W<R ))4&J2"F0F:N!OU&\@>YX
MSL,&D>Z(3<GG87M(=\1FXO.P.:0[8A/P>=@:,@,5".0>P)9M<SM>=0!DPN+)
MK0A,KT=D2%10D-$^NOOX"E[?6E"DL1 2(HJ$4!!1)H2&B"HA#$38*?B Y!A"
M4SWU$2PHBE=(&BLDZ;Y]J-L>^SSM&YB#Q\'.P4" \L#;$=2@%P#,@_% /8 :
M\@4`-5A?&LYXIDL/P)FN%@!+DLH\@&;:/L7L`% #=1=3?X$S;4\E$H!FVMXW
MZ@`P2<8#<*;S!0`US);^;7S@>2Z=/)SE*LACZ:$Y!Y)',TP3#DX>_+YT<0?X
M=4:44M@#';,TV+!HXZ3!;]O130N6NO8K)8_S8^A^9&B?5JXH"5+5BE(89;)(
M/?=H"HU846 *C5Q1: K5BM(@I2.5'NS;H<R*0O.5KR@T7WXHA=9XXT=2X&,9
MA5TP\P#FVWFV`%C<0HMC'L#"%EH2(Z!%@XI<+0"8!S]FOK4G4 /=?%[C/2PM
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MOO[6=I]F0*](P2#G^O*/__:O?__EUU\SN9.\(BAQ_1:NHTQ!R0"K`#H?@L'8
MJ,W-!Z=1$Z%1.\[12WWI^AU?L*_K##70I@E:*[PVTYW>0*?B"QHH*/LB-X*6
M`!U'ME4Y#B:-J& THF)I1+O+U)U>K^UMMQ2H&;W4^Q7"O65B)7?J@WN^)+9O
M^9>R%!<M696:D5<[I4"9;5ZZ2S\]W\;V\/QV:/O_^!H+;4:"[162;3:.MPDI
M)MMN.-G=@K(-QW&Z7_O:/^[HTM2.;2.?^GH.3S\+OBO_,D.D*RYM`NWB&R9=
MI+H++EVF-%MWE=*:2=/<0*0EEQ8IG7-IF=**2\_>\B_!"^77GD5K68NLVI&E
M[5]S/]MVX]<-H1UL][5-=4-/QG;C5PXN0YL\#UTOY_G?7]<S^U[%<+[?@4;9
MOE,QRQZ'VG:<ZHG Z?@ZGEYL\SK_Z<-BM,]/.-"9'^;LKH8%9"A,6G/):,WE
MTIHW/X>Q`XIOU99_77I)LRLYS:Z,[>?L`R^OXW3?399M/9N7,Y0PVZB-T^/2
M7ZUAY=-XF[IYM#@3_?6I/U^OGQ6SO4G1DB[HP,$B@,XE<+ *X-3<'^>6HY2:
M@JA4,4"5F(X3(JDGX2S7US^O-=);JE"!`_&UJ>W%N;&;G+X43?LND3UY#3N-
MH+O8M:]GZ=/Q[LZ!?I7?6/,4H^8Y,-$BOQ;.O?#;%4A2L1+^^LNA`>COP^P>
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M`A'7B[A$Q.EI@3LY#2";.UGHNS3>?@QT,NXW>X/-4'\F6#I!N2LHC2\U=T?-
MM6TZDOHR%3)/& DR[@TM`UG'5NNYU1C/P]"-PF JJ'I'* <AG4(%")D4*D&H
M3" )%K6J4@@IZX+ZS>YZ:_IKL^<HQ9-RLF>[.6)'EC;C7Y\/]NT?R%7L2;V(
M8*D7=BMQ]^,P=[D'>@$8@O0*RC'(N,R/=8NF+?=$1U?80D3A"'=Z$B+HZ8C;
M;(B#%=VM+84]\/Y7,GC?[%5X=Z!NZ0.E@;ZO4R2'$'L/!+T:-TA(/D][9J3A
M=,?J$@;34Z8.J;#J5*WT:$0/13WG@5Z[.-Y^8-FQSR#5=#4.(JR<,)88O?@@
MF!2SN#D(4+V8I5M4`<VKU<W]C%F-!CQ.'"H<K9<&4&#-E"XC@=52.J?U=KXT
MA^ETR,R -899PN0@(RS36T: C$P8"3+V]&6+&ISV!B]9055XKZ(]B* 6BB4#
M`7F*\<WM[=K7:%;*)"M@"><NU)P'0^T(MB*Y3!"-(2[,$D*X"\DAID@9K%>C
M<>&]&UY0%16)V[-<N\5;^A<?<SB\+/U[CSD<7)9VYG!&B@Q7(D2"@%KH9$!W
M*.;_@6HJ6^5=I PZ2F5K_()H#)D+^3X]T@CN<UGE9"4BJYVL0F2-D]6(;.YD
M#2);.-D<D2V=; '(^LIE,MPROFXY!+-,[@\!SR%\;6\]> 8=)Z_>@1("B^P=
MB.6N$.] +(^%? <:#%0I" 7M[JQ"`A405/H3P;=AZNUMXQ"4KR"L^,MB!6%%
M7Y8K""OVLEI!6)%7V0K"BKP2*P@K\DJNH!*#["[_J3_=Y^'/3.]W,)6]_V;^
MF^EV86'AN8^2T0"$QSY*1@O@'N=N:]#IW./<;0VZFYV^F%Q@C\D;^WE0F.Z_
MN'?PMPL;0[[!\B7)TU 7D]=Y.NM2@5"13J!D&$3==M<WJ(FIRR9Q`XK3;&)=
M*C6]+]KA\1ED`M2?)PP36>;G1"L;YE1/Q_/T,E?(4WWO:$'PXR021I6CZ>Z'
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M0/GIX><KKV+X<\4!Y12JWWH84$X-46*%:@XJ5ZCAH(I:`3>;QZ!TH%B%8P+%
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M.%>DG,:Y,N4,SE4IE^.</2@TC?P"M<>%%I!1HC0RB""C2&E8$$%&F=H[`A:0
M4:@TF&C'YAN%DZ<@IW#H]I)[_0V-90IR--+Z4/\'7R,U7Q'D-!ITFPG=?\+6


0
ObiWan
9/16/2009 3:53:07 PM
M*%.0HU$1^/B&1IV"'(TF!1E.3N.."#*<G,Y^1Y#AY+02'4%&TT'KT!'D-/Y9
M"C(:?WL/S@)6#% FH,@88.HY@N$Y*O4<P? <E7J.8'@.C?^.H0O@8B<V5JR:
MC4-S>9T8=+EJ.[ATVF0Q69VM&A\NO6JZN.G6:?O%9572P3.PU T9F$EZ3 :6
M)YT0`Z-[H=N:G3DZ0#Z]<>H(K2:ZN%,P`]:\6)&,1BM/0KH73N>35RG(:$+H
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M>VTR$;1KXM1B+X-8>1GD)21O3T'1_??98;37+HVW]NDV#5\B.8;\/U!+`0(7
M"Q0``@`(`&.',#O+YLU>[#@``-W1`0`+`!$```````$`( "V@0````!C;VUC
M87-T+G1X=%-$! !<````550%``<Z_;!*4$L%!@`````!``$`2@```'8Y````
!````
`
end


0
ObiWan
9/16/2009 3:53:07 PM
On Tue, 15 Sep 2009 10:42:08 -1000, Kevin A. wrote:

>I wouldn't think it's worth a modification of DNSB at this point though. 
>Probably. :-)

Hi Kevin, yep, Comcast servers are not "Public" at all.

For anyone else, the original list I compiled was missing UTAH.  My
modified updated lists is below.

Comcast is adding some features at: http://dns.comcast.net/ but I'm
not at all sure if anyone outside can even see this page?

68.87.64.146        nrcns.ndceast.pa.bo.comcast.net
68.87.64.150        cns.inflow.pa.bo.comcast.net
68.87.68.162        nrcns.s3woodstock.ga.atlanta.comcast.net
68.87.68.166        cns.s3woodstock.ga.atlanta.comcast.net
68.87.69.146        nrcns.beaverton.or.bverton.comcast.net
68.87.69.150        cns.beaverton.or.bverton.comcast.net
68.87.71.226        nrcns.chelmsfdrdc2.ma.boston.comcast.net
68.87.71.230        cns.chelmsfdrdc2.ma.boston.comcast.net
68.87.72.130        nrcns.area4.il.chicago.comcast.net
68.87.72.134        cns.area4.il.chicago.comcast.net
68.87.73.242        nrcns.manassaspr.va.dc02.comcast.net
68.87.73.246        cns.manassaspr.va.dc02.comcast.net
68.87.74.162        nrcns.bonitasprngs.fl.naples.comcast.net
68.87.74.166        cns.bonitasprngs.fl.naples.comcast.net
68.87.75.194        nrcns.summitpark.pa.pitt.comcast.net
68.87.75.198        cns.summitpark.pa.pitt.comcast.net
68.87.76.178        nrcns.sanjose.ca.sanfran.comcast.net
68.87.76.182        cns.sanjose.ca.sanfran.comcast.net
68.87.77.130        nrcns.westlandrdc.mi.michigan.comcast.net
68.87.77.134        cns.westlandrdc.mi.michigan.comcast.net
68.87.78.130        nrcns.saltlakecity.ut.utah.comcast.net
68.87.78.134        cns.saltlakecity.ut.utah.comcast.net
68.87.85.98         nrcns.cmc.co.denver.comcast.net
68.87.85.102        cns.cmc.co.denver.comcast.net

Bill
-- 
Bill_MI - Bill in Michigan
Expert Opinions $20, Shut-Up $50
0
Bill_MI
9/16/2009 4:59:41 PM
"Bill_MI" <bill@mi.no.spam.ath.cx> wrote in message 
news:l662b5hborfigvnrp43n02fvdu9277f4lt@4ax.com...
> On Tue, 15 Sep 2009 10:42:08 -1000, Kevin A. wrote:
>
>>I wouldn't think it's worth a modification of DNSB at this point though.
>>Probably. :-)
>
> Hi Kevin, yep, Comcast servers are not "Public" at all.
>
> For anyone else, the original list I compiled was missing UTAH.  My
> modified updated lists is below.
>
> Comcast is adding some features at: http://dns.comcast.net/ but I'm
> not at all sure if anyone outside can even see this page?

.....snip

I am definitely not on Comcast and I can see that page and the dns status 
page at:
http://dns.comcast.net/status.php

I guess it does no harm. 


0
Kerry
9/16/2009 5:07:39 PM
On Wed, 16 Sep 2009 in grc.dns, Kerry Liles wrote
>"Bill_MI" <bill@mi.no.spam.ath.cx> wrote in message
>news:l662b5hborfigvnrp43n02fvdu9277f4lt@4ax.com...
>> On Tue, 15 Sep 2009 10:42:08 -1000, Kevin A. wrote:
>>
>>>I wouldn't think it's worth a modification of DNSB at this point though.
>>>Probably. :-)
>>
>> Hi Kevin, yep, Comcast servers are not "Public" at all.

Yeah, I knew that I wouldn't get answers, I just ran the test to see 
what it said. I was surprised to see that they were all tagged with the 
"Nameserver returned invalid replies" line, since I suspected it wasn't 
really 'invalid'. And had seen a few more of those responses on Steve's 
trial list.

>> For anyone else, the original list I compiled was missing UTAH.  My
>> modified updated lists is below.

Thanks, I'll grab the new list for later testing. :-)

>> Comcast is adding some features at: http://dns.comcast.net/ but I'm
>> not at all sure if anyone outside can even see this page?
>
>....snip
>
>I am definitely not on Comcast and I can see that page and the dns status
>page at:
>http://dns.comcast.net/status.php

They're accessible from here now too, and I know they weren't earlier, 
so they've made some changes. :-) I don't see an actual opt-out page 
there though?

>I guess it does no harm.

It looks like more technicians than whiz-bang marketing types were 
involved in creating those pages too. <g> They actually provide 
information without a lot of glitter. Except for the Flash based menu at 
the bottom of the page at least, and that's a Comcast standard.

-- 
GRC Newsgroups/Guidelines/No Regrets:
http://www.imilly.com/noregrets.htm
 From invalid, Reply To works.
http://www.2kevin.net/munging.html
0
Kevin
9/16/2009 5:47:56 PM
"Bill_MI" <bill@mi.no.spam.ath.cx> wrote in message 
news:l662b5hborfigvnrp43n02fvdu9277f4lt@4ax.com...

> Comcast is adding some features at: http://dns.comcast.net/ but I'm
> not at all sure if anyone outside can even see this page?

It comes in real slow but shows up, now goto the
http://security.comcast.net/
as it shows critical for threat alert (sno leopards?)

Then above page also shows...
Webpage error details

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; 
..NET CLR 1.1.4322; FDM; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 
3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Timestamp: Wed, 16 Sep 2009 18:39:45 UTC

Message: 'document.getElementById(...)' is null or not an object
Line: 534
Char: 6
Code: 0
URI: http://security.comcast.net/

OK, back to you Bill. ;)

'Seek and ye shall find'
NT Canuck


0
NT
9/16/2009 6:41:46 PM
On Wed, 16 Sep 2009 07:47:56 -1000, Kevin A. wrote:

>>> Comcast is adding some features at: http://dns.comcast.net/ but I'm
>>> not at all sure if anyone outside can even see this page?
>
>It looks like more technicians than whiz-bang marketing types were 
>involved in creating those pages too. <g> They actually provide 
>information without a lot of glitter. Except for the Flash based menu at 
>the bottom of the page at least, and that's a Comcast standard.

Yes, the technicians that are involved in this exact page post on
DSLReports in the Comcast group.  They seem to be the ones that:

1) Provided the opt-out
2) Starting the possible RFC.
3) Only redirected "www.(bad-domain)"... this really prevents non-web
apps that redirecting would break be perfectly functional.  AFAIK,
Comcast is the first to do this...

ftp.dfh36fh34rf64hf4f.com       NXDOMAIN
smtp.dfh36fh34rf64hf4f.com      NXDOMAIN
gopher.dfh36fh34rf64hf4f.com    NXDOMAIN
anything.dfh36fh34rf64hf4f.com  NXDOMAIN

www.dfh36fh34rf64hf4f.com       redirects ONLY

They did a good job IMHO... despite the "me too" management and
marketing people.

Bill
-- 
Bill_MI - Bill in Michigan
Expert Opinions $20, Shut-Up $50
0
Bill_MI
9/16/2009 10:07:23 PM
[for the unabridged version, see Kevin A.'s post above]

> I wouldn't think it's worth a modification of DNSB at this
> point though.  Probably. :-)

I wanted to at least see what was going on.

That particular nameserver [151.99.125.9] was refusing to reply. 

But it's error return packet was not the typical reply that 
returns the query information as part of the reply. So my sanity 
checking was coming *before* the "refusal check" and calling the 
packet an invalid reply, when it was actually a refusal without 
the usual accompanying return info.

I've updated the code to now be aware of this sort of resolver 
response.  :)

-- 
________________________________________________________________
Steve.  Working on: GRC's DNS Benchmark utility:
        http://www.grc.com/dev/DNSBench.exe
0
Steve
9/17/2009 5:18:33 PM
On Wed, 16 Sep 2009 in grc.dns, Bill_MI wrote
>On Wed, 16 Sep 2009 07:47:56 -1000, Kevin A. wrote:
>
>>>> Comcast is adding some features at: http://dns.comcast.net/ but I'm
>>>> not at all sure if anyone outside can even see this page?
>>
>>It looks like more technicians than whiz-bang marketing types were
>>involved in creating those pages too. <g> They actually provide
>>information without a lot of glitter. Except for the Flash based menu at
>>the bottom of the page at least, and that's a Comcast standard.
>
>Yes, the technicians that are involved in this exact page post on
>DSLReports in the Comcast group.  They seem to be the ones that:
>
>1) Provided the opt-out
>2) Starting the possible RFC.
>3) Only redirected "www.(bad-domain)"... this really prevents non-web
>apps that redirecting would break be perfectly functional.  AFAIK,
>Comcast is the first to do this...
>
>ftp.dfh36fh34rf64hf4f.com       NXDOMAIN
>smtp.dfh36fh34rf64hf4f.com      NXDOMAIN
>gopher.dfh36fh34rf64hf4f.com    NXDOMAIN
>anything.dfh36fh34rf64hf4f.com  NXDOMAIN
>
>www.dfh36fh34rf64hf4f.com       redirects ONLY

Nice bit of testing, and a good example of how redirecting can break 
things besides a browser. :-)

>They did a good job IMHO... despite the "me too" management and
>marketing people.

Yeah, if they're going to do it at all, they seem to have done it in the 
most responsible manner so far. :-)

-- 
GRC Newsgroups/Guidelines/No Regrets:
http://www.imilly.com/noregrets.htm
 From invalid, Reply To works.
http://www.2kevin.net/munging.html
0
Kevin
9/17/2009 11:51:47 PM
On Thu, 17 Sep 2009 in grc.dns, Steve Gibson wrote
>[for the unabridged version, see Kevin A.'s post above]
>
>> I wouldn't think it's worth a modification of DNSB at this
>> point though.  Probably. :-)
>
>I wanted to at least see what was going on.
>
>That particular nameserver [151.99.125.9] was refusing to reply.
>
>But it's error return packet was not the typical reply that
>returns the query information as part of the reply. So my sanity
>checking was coming *before* the "refusal check" and calling the
>packet an invalid reply, when it was actually a refusal without
>the usual accompanying return info.
>
>I've updated the code to now be aware of this sort of resolver
>response.  :)

That should help, thanks. :-)

-- 
GRC Newsgroups/Guidelines/No Regrets:
http://www.imilly.com/noregrets.htm
 From invalid, Reply To works.
http://www.2kevin.net/munging.html
0
Kevin
9/17/2009 11:52:47 PM
Reply:

Similar Artilces:

DNS error: malformed DNS reply from...
Hi: I'm getting the following error message on my Symantec AntiVirus for SMTP Gateways box (MS Windows 2000): ***** Event Type: Warning Event Source: Symantec AntiVirus for SMTP Gateways Event Category: None Event ID: 2 Date: 5/25/2004 Time: 10:33:12 AM User: N/A Computer: SAVGATE Description: Error: Malformed DNS reply from [xxx.xxx.xxx.xxx].53. Data: 0000: 00 00 00 00 .... ***** My DNS server is NW 6 w/SP2, DNSDHCP ver 1.2.0 and named version 5.10.06 It appears that this is just an informational message? DNS seems to run otherwise. I wo...

DNS Nameserver Spoofability Test and Google DNS
I am trying the DNS Nameserver Spoofability Test with Google's DNS servers (8.8.8.8 and 8.8.4.4) but I am not getting any feedback on them. It keeps giving me analasys of 74.125.94.94. If I change my DNS in my router over to OpenDNS it sends back info fine. Anyone else? On Sat, 5 Dec 2009 11:20:06 -0500, Steve Roy wrote: > I am trying the DNS Nameserver Spoofability Test with Google's DNS servers > (8.8.8.8 and 8.8.4.4) but I am not getting any feedback on them. It keeps > giving me analasys of 74.125.94.94. If I change my DNS in my router over to > OpenDN...

bungled reply format (extra returns in reply text)
I'm on a newsgroup and often have the "reply text" formatted in a funky and unreadable way when when I reply to a message on a thread. It often takes a form such as below and I have to manually reformat it to get it readable. Is there a way to prevent this? Thanks. e.g. > toolbars > or create a new collection (by New) and the Import the toolbar you want > there. Jonathan wrote: > I'm on a newsgroup and often have the "reply text" formatted in a funky > and unreadable way when when I reply to a message on a thread. It often &...

reply to reply
I seem to be running into issues with several clients that we host AV/SPAM services for. They relay out through our secondary GWIA. The past couple of days when ever they reply to a message maybe 20% of the time or more they get an undeliverable message and the GWIA log errors range from Send Failure: 550 Host unknown (thefightnetwork.com) this was on a reply to their reply. Response: 550 Relaying denied (we're not relaying we're replying) Response: 550 Host unknown (lynx.org) (but can nslookup type=mx no issue) Response: 550 Host unknown (bell.ca) This seems to...

Reply / Reply All
Name: IT Systems Engineer in NE Kansas Product: Thunderbird Summary: Reply / Reply All Comments: I'm an IT engineer of nearly 15 years and linux guy since 1999 and I can't tell you how many hours I've spent now combing through all the information, blogs, comments, etc. trying to find out how to configure Thunderbird to format replies similar to Outlook. This really astounds me when I see so much resistance to make this basic accommodation to the user community and for so many years too. In the business realm, Outlook is *the* email client, and it's reply sty...

DNS? What DNS?
This has never happened before and in light light of this morning's news about the DDOS I was wondering if it is just my machine or if something else is going on. Background: A firewall on one of my machines blocked IE from getting to the net. I wanted to trace where it was planning to go to (207.188.24.150)to figure out if this was just XP again or something else. I tried Neo Trace and PC Helps "Net Tracer" but neither can track it. All I get is "undetermined" or "timed out" Robin In article <3DB714A2.7050902@twcny.rr.com>, omeru...

DNS UP
Hi We are running 2 BM (3.8) Proxies and until today they have been operating reasonably well. Today we have started getting a lot of 504 errors on workstations using either both servers, looking at the proxy DNS page (on both servers) the DNS links are continually going up and down (like our internet) We have 3 DNS servers entered 2 external and 1 internal. I have tested from outside the BM Servers $and know the 2 external DNS servers are working fine (also no one else who use our provider have an issue). The internal DNS also seems fime. We have not made any changes to th...

superreview cancelled: [Bug 254393] PK11_FindKeyByAnyCert always returns a key object even if there is no key : [Attachment 155318] don't return a private key object if CK_OBJECT_HANDLE is invalid
Julien Pierre <julien.pierre.bugs@sun.com> has cancelled Nelson Bolyard <nelson@bolyard.com>'s request for superreview: Bug 254393: PK11_FindKeyByAnyCert always returns a key object even if there is no key http://bugzilla.mozilla.org/show_bug.cgi?id=254393 Attachment 155318: don't return a private key object if CK_OBJECT_HANDLE is invalid http://bugzilla.mozilla.org/attachment.cgi?id=155318&action=edit ...

superreview requested: [Bug 254393] PK11_FindKeyByAnyCert always returns a key object even if there is no key : [Attachment 155318] don't return a private key object if CK_OBJECT_HANDLE is invalid
Julien Pierre <julien.pierre.bugs@sun.com> has asked Nelson Bolyard <nelson@bolyard.com> for superreview: Bug 254393: PK11_FindKeyByAnyCert always returns a key object even if there is no key http://bugzilla.mozilla.org/show_bug.cgi?id=254393 Attachment 155318: don't return a private key object if CK_OBJECT_HANDLE is invalid http://bugzilla.mozilla.org/attachment.cgi?id=155318&action=edit ...

superreview requested: [Bug 254393] PK11_FindKeyByAnyCert always returns a key object even if there is no key : [Attachment 155318] don't return a private key object if CK_OBJECT_HANDLE is invalid #2
Nelson Bolyard <nelson@bolyard.com> has asked Ian McGreer <bugz@misoneism.org> for superreview: Bug 254393: PK11_FindKeyByAnyCert always returns a key object even if there is no key http://bugzilla.mozilla.org/show_bug.cgi?id=254393 Attachment 155318: don't return a private key object if CK_OBJECT_HANDLE is invalid http://bugzilla.mozilla.org/attachment.cgi?id=155318&action=edit ------- Additional Comments from Nelson Bolyard <nelson@bolyard.com> >+ if (keyHandle == CK_INVALID_HANDLE) { >+ goto loser; > } > privKey = PK11_Mak...

DNS Nameserver options
We will soon upgrade our internet connection to a faster link and will need to host our dns services locally which is now maintained by our local university. I am currently using the novell dns to reslove local addresses. For convenience I thought that using a linux box for all external dns requests would be the best way to go. plan public ip <--> bordermanager translated to private ip <--> dns name server At this time I think our secondary dns server will be hosted off site. I am new to dns and would like comments on the above solution. Thank you Ian ...

MembershipCreateStatus returns Invalid UserName
Hi, I'm using a custom membership provider (XML file), and I want to insert the user's credentials for more than thousand users by using CreateUser methodthe problem comes when I try to insert a new user the MembershipCreateStatus returns Invalid UserName here is my code: string employeeID="1234567"MembershipCreateStatus status;MembershipUser newUser =Membership.Provider.CreateUser(employeeID, employeeID, "aa@aa.aa", String.Empty, String.Empty, true, Guid.NewGuid(), out status); if (newUser == null) errorMsg = status.ToString(); else Membership.UpdateUser(newUser...

Second DNS nameserver fails
Hi all I have this strange problem regarding dns-lookups on opensuse11 I start a private vpn that hijacks the /etc/resolv.conf and inserts itself as the first nameserver: Code: -------------------- cat /etc/resolv.conf search secana.local nameserver 10.1.2.64 nameserver 192.168.2.3 -------------------- It then fails for all local addresses that the first one do not know about: Code: -------------------- dig src ; <<>> DiG 9.4.2-P1 <<>> src ;; global options: printcmd ;; Got answer: ;; ->>H...

Could not reply, reply all, forward
For some reason those TB 2.0.0.16 buttons just stopped working.Restarted TB, then rebooted, no. In safe mode, OK. Back to regular mode, not OK. Changed to default theme, no change, so back to SPC theme. Disabled about half the extensions and all is OK. Slowly put them all back and all remains OK. This is my first such experience. Am I to conclude that it was due to a conflict between a couple of extensions and disabling/restarting them fixed it (for the moment perhaps)? Miles Miles keyboarded, On 7/27/2008 3:23 PM : > For some reason those TB 2.0.0.16 buttons just stopp...

Web resources about - Nameserver returned invalid replies - grc.dns

Root name server - Wikipedia, the free encyclopedia
A root name server is a name server for the Domain Name System 's root zone . It directly answers requests for records in the root zone and answers ...

IANA Adds .XXX Top Level Domain To Root Nameservers
The Internet Assigned Numbers Authority (IANA) has added the .XXX top level domain to root nameservers. Some domain name registration companies ...

CloudFlare Provides Nameserver DDoS Protection With Virtual DNS
Web performance and security solutions provider CloudFlare announced on Tuesday the availability of a new service designed to protect DNS nameservers ...

CloudFlare launches nameserver DDoS shield
Hosed and hapless hosters to hide from hackers CloudFlare has launched a DNS proxy service it says will help organisations improve DNS resilience ...

H33T.com Goes Down as Nameservers Vanish
... been down for more than 12 hours under suspicious circumstances. The site’s domain records have been updated yesterday and after that the nameservers ...

Private network - Wikipedia, the free encyclopedia
In the Internet addressing architecture, a private network is a network that uses private IP address space, following the standards set by RFC ...

nic.ac - the .ac domain registry and network information centre - rules
2.1 The rules given here apply to all requests for names in the .AC domain and all sub-domains of .AC except where differing rules exist for ...

Nameserver Lookup
This online tool determine the IP address to a hostname and vice versa. If available, the alias IP addresses will be displayed too.

SpyEye Tracker :: Monitor
The abuse.ch SpyEye Tracker help you to track SpyEye Command&Control servers (C&Cs) and generating a IP-blocklist or domain-blocklist

ZeuS Tracker :: Monitor
The abuse.ch ZeuS Tracker help you to track ZeuS Command&Control servers and generating a IP-blocklist or domain-blocklist

Resources last updated: 1/17/2016 9:04:39 AM