- NANOG - lists.nanog.org

RE: First? TRUE Root Name Server On Line
by Jim Fleming 24 Nov '96

24 Nov '96

On Sunday, November 24, 1996 2:27 AM, Paul A Vixie[SMTP:paul@vix.com] wrote: @ Jim. @ @ You do not understand even the difference between "recursive" and @ "resolves second level names." Why in the world do you expect @ anybody, anywhere, to give a rat's ass what you're doing or saying? @ @ Paul @ Paul, Because the 9 popular Root Name Servers are NOT configured as TRUE Root Name Servers, it is difficult to draw fine distinctions between recursion, iteration, referrals, etc. If you check pages 31 and 32 of the book, "DNS and BIND", by Paul Albitz & Cricket Liu you will not serveral statements which attempt to differentiate between "recursion" and "iteration". In one statement, they state, "In recursion, a resolver sends a recursive query to a name server...The queried name server is then obliged to respond with the requested data...The name server can't just refer the querier to a different name server, because the query was recursive." Because the 9 popular Root Name Servers are not configured as TRUE Root Name Servers (and also do not meet other basic Root Name Server requirements), it is a coincidence that they are able to avoid recursion and return information for the .COM, .NET, .ORG, .EDU, .MIL, .ARPA, etc. domains. When they do this, they appear to look like a "recursive" to another server or resolver that is using their services. I hope that we can agree that TRUE Root Name Servers should only return "referrals" to other Top Level Domain Name Servers. In the above book, this is considered "Iterative Resolution" because "a name server simply gives the best answer it already knows... it makes its best attempt to give the querier data that will help it continue the resolution process". While I continue to find it interesting that you always lower yourself to personal attacks, in apparent violation of the IETF Code of Conduct, I am not sure that your attacks help to educate Internet users. Your attacks also do not focus on the real problem which is the fact that the 9 popular Root Name Servers, used by many ISPs, are not properly configured as TRUE Root Name Servers. If you like, we can leave the complex terms, recursion and iteration out of these discussions. In the future, we can refer to TRUE Root Name Servers, as those that meet the technical requirements for being called a TRUE Root Name Server. If and when the 9 popular Root Name Servers ever meet these requirements, then we can refer to them as TRUE Root Name Servers, and everyone will understand that they do not return replys which appear to be the result of a recursive search, thus giving one the impression that they are recursive. -- Jim Fleming UNETY Systems, Inc. Naperville, IL e-mail: JimFleming(a)unety.net JimFleming(a)unety.net.s0.g0 (EDNS/IPv8)

1 0

FW: First? TRUE Root Name Server On Line
by Jim Fleming 24 Nov '96

24 Nov '96

RE: First? TRUE Root Name Server On Line Name: NS2.NIC.EARTH IP Address: 199.5.157.5 When history is made on the Internet, it is important to briefly pause to recognize the event, and then move forward. Recently, one of the first TRUE Root Name Servers was put into service by John Palmer of The American Global Network, Inc. (AGN.NET) [1]. AGN is the owner and operator of the Top Level Domain Registry for the .EARTH and .USA TLDs. There are several factors which make this particular Root Name Server unique: 1. First and foremost, this appears to be the first, public access, Root Name Server which operates as a TRUE NON-RECURSIVE Root Server [2]. This is a requirement which is part of the new root name server guidelines which are being discussed by the IETF and other engineering groups. The 9 "popular" root name servers use by many ISPs do NOT meet these guidelines and resolve second level names.[3] True root name servers should do nothing but return references to TLD Name Servers [2], to reduce the scope of their control and their overall load. 2. The official name of this root name server is...NS2.NIC.EARTH. Because of the growing availability of access to the new Top Level Domains, such as .EARTH, it seems appropriate to begin naming the new Root Name Servers with the newly available names. 3. This Root Name Server can be added to the growing collection of Root 64 Name Servers which can be freely used by ISPs in their "root.cache" files. Because this Root Name Server is supported by a commercial enterprise, and not a hodge podge of volunteers (or the U.S. Government), ISPs can use this Root Name Server to help bring added stability and performance to their systems. [4] [5] In these times where confusion is being caused by groups who think that they can continue to debate the Top Level Domain issues primarily to prevent businesses (registries, ISPs, etc.) from making progress, it is important to recognize the efforts being made by business people to bring stability to the system and better service to consumers. As has been proven over and over during the past year, new commercial Top Level Domains are a reality along with new commercial Root Name Servers. The business community is rising to the challenge of building a better, more complete, and better engineered Internet now that the research and development is largely over. More commercial Root Name Servers are being installed and tested. As news of their introduction becomes available the "newdom" mailing list seems like the best place to keep everyone informed. The web interface for subscribing to that list can be found at: http://www.newdom.com/lists/ @@@@@@ [1] @@@@@@@@@ Result of: whois 199.5.156 The American Global Network, Inc. (NETBLK-RABBIT2) 31511 Harper Ave. St. Clair Shores, MI 48082 Netname: NETBLK-RABBIT2 Netblock: 199.5.156.0 - 199.5.157.0 Coordinator: Palmer, John P. (JP4736) jp(a)AGN.NET 800-456-0094 (FAX) 810-790-0156 Domain System inverse mapping provided by: SIMBA.AGN.NET 160.79.1.3 NS.AGN.NET 160.79.1.1 Record last updated on 18-Jan-96. @@@@@@ [2] @@@@@@@@@ Result of: dig @199.5.157.5 mcs.com any ; <<>> DiG 2.1 <<>> @199.5.157.5 mcs.com any ; (1 server found) ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10 ;; flags: qr rd; Ques: 1, Ans: 0, Auth: 9, Addit: 9 ;; QUESTIONS: ;; mcs.com, type = ANY, class = IN ;; AUTHORITY RECORDS: COM. 172800 NS A.ROOT-SERVERS.NET. COM. 172800 NS H.ROOT-SERVERS.NET. COM. 172800 NS B.ROOT-SERVERS.NET. COM. 172800 NS C.ROOT-SERVERS.NET. COM. 172800 NS D.ROOT-SERVERS.NET. COM. 172800 NS E.ROOT-SERVERS.NET. COM. 172800 NS I.ROOT-SERVERS.NET. COM. 172800 NS F.ROOT-SERVERS.NET. COM. 172800 NS G.ROOT-SERVERS.NET. ;; ADDITIONAL RECORDS: A.ROOT-SERVERS.NET. 518400 A 198.41.0.4 H.ROOT-SERVERS.NET. 518400 A 128.63.2.53 B.ROOT-SERVERS.NET. 518400 A 128.9.0.107 C.ROOT-SERVERS.NET. 518400 A 192.33.4.12 D.ROOT-SERVERS.NET. 518400 A 128.8.10.90 E.ROOT-SERVERS.NET. 518400 A 192.203.230.10 I.ROOT-SERVERS.NET. 518400 A 192.36.148.17 F.ROOT-SERVERS.NET. 518400 A 192.5.5.241 G.ROOT-SERVERS.NET. 518400 A 192.112.36.4 ;; Total query time: 29 msec ;; FROM: doorstep.unety.net to SERVER: 199.5.157.5 ;; WHEN: Sat Nov 23 10:59:28 1996 ;; MSG SIZE sent: 25 rcvd: 332 @@@@@@ [3] @@@@@@@@@ Result of: dig @a.root-servers.net mcs.com any ; <<>> DiG 2.1 <<>> @a.root-servers.net mcs.com any ; (1 server found) ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10 ;; flags: qr rd; Ques: 1, Ans: 2, Auth: 2, Addit: 2 ;; QUESTIONS: ;; mcs.com, type = ANY, class = IN ;; ANSWERS: mcs.com. 172800 NS CEREBUS.mcs.com. mcs.com. 172800 NS KITTEN.mcs.com. ;; AUTHORITY RECORDS: mcs.com. 172800 NS CEREBUS.mcs.com. mcs.com. 172800 NS KITTEN.mcs.com. ;; ADDITIONAL RECORDS: CEREBUS.mcs.com. 172800 A 192.160.127.125 KITTEN.mcs.com. 172800 A 192.160.127.90 ;; Total query time: 88 msec ;; FROM: doorstep.unety.net to SERVER: a.root-servers.net 198.41.0.4 ;; WHEN: Sat Nov 23 12:31:25 1996 ;; MSG SIZE sent: 25 rcvd: 128 @@@@@@ [4] @@@@@@@@@ Sample Traceroute to the NEW Root Server 1 chi00-s8-3.nap.net (206.54.225.89) 4.131 ms 4.066 ms 4.211 ms 2 core0-atm0.chi.nap.net (207.112.247.33) 4.013 ms 4.913 ms 4.309 ms 3 909.Hssi3-0.GW2.CHI1.ALTER.NET (137.39.130.173) 5.988 ms 5.735 ms 5.69 ms 4 Fddi1.CR1.CHI1.Alter.Net (137.39.38.193) 5.555 ms 6.243 ms 6.533 ms 5 106.Hssi3-0.GW1.DET1.Alter.Net (137.39.58.58) 14.022 ms 15.304 ms 15.322 ms 6 agn-gw.ALTER.NET (137.39.146.6) 18.409 ms 20.191 ms 19.351 ms 7 NS2.NIC.EARTH (199.5.157.5) 17.695 ms 18.895 ms 17.738 ms @@@@@@ [5] @@@@@@@@@ Sample Ping to NEW Root Server for above route. # ping -c 5 199.5.157.5 PING 199.5.157.5 (199.5.157.5): 56 data bytes 64 bytes from 199.5.157.5: icmp_seq=0 ttl=247 time=19.313 ms 64 bytes from 199.5.157.5: icmp_seq=1 ttl=247 time=20.071 ms 64 bytes from 199.5.157.5: icmp_seq=2 ttl=247 time=18.218 ms 64 bytes from 199.5.157.5: icmp_seq=3 ttl=247 time=19.377 ms 64 bytes from 199.5.157.5: icmp_seq=4 ttl=247 time=18.007 ms --- 199.5.157.5 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max = 18.007/18.997/20.071 ms @@@@@@@@@@@@@@@ -- Jim Fleming UNETY Systems, Inc. Naperville, IL e-mail: JimFleming(a)unety.net JimFleming(a)unety.net.s0.g0 (EDNS/IPv8)

7 6

A little funny.
by Derek Elder 24 Nov '96

24 Nov '96

Ok -- one last post about the 'root name server'. While responding to the email address of Bob Allisat <tor(a)wtv.net>, I got the following bounce: The original message was received at Sun, 24 Nov 1996 13:14:20 -0500 from djelder(a)mtvernon1.accessus.net [204.248.93.5] ----- The following addresses had delivery problems ----- <tor(a)wtv.net> (unrecoverable error) ----- Transcript of session follows ----- 554 MX list for wtv.net. points back to presence.lglobal.com 554 <tor(a)wtv.net>... Local configuration error ----- Original message follows ----- [ Part 2: "Included Message" ] The newest net revolutionary can't even setup sendmail and he expects us to take him seriously? Bob, you really, really, should add wtv.net to the sendmail.cw on your mail server. *chuckles politely* | Derek Elder http://www.accessus.net V.P., CIO | | djelder(a)accessus.net accessU.S., Inc. 888-637-3638 Ext. 222 |

1 0

Re: First? TRUE Root Name Server On Line
by tor＠wtv.net 24 Nov '96

24 Nov '96

Derek Elder wrote: >Perhaps you should move this drivel to a list populated by 31337 warez >dudes. You may find your revolution there -- however, I have serious >doubts that any of them even know what bind is, let alone how to changed >root.cache. And I have serious doubt you understand any of the millions of people now rushing onto the internet media. Once the inevitable transfer of Internet to television and smart box is completed your roles as info-czars will be finished. By clueless people like me. Your gang is treading on thin ice now. Very thin, cracking ice with the sun coming out. Bob Allisat PO Box 191 Station E Toronto Canada M6H 4E2 (416) 588-0670

2 1

Re: FW: First? TRUE Root Name Server On Line
by Joel M Snyder 24 Nov '96

24 Nov '96

The ONE TRUE ROOT SERVER? Why, I'M RUNNING that! All BOW DOWN and WORSHIP at the ALTAR of the TRUE ROOT SERVER! These other servers are FALSE and you must NOT heed them! The ONE TRUE ROOT SERVER is MINE! YOUR server is FALSE! You WORSHIP FALSE SERVERS! Your PACKETS will ROT IN IPX if you DO NOT REPENT! YOUR data will be ENCAPSULATED! Your CHECKSUMS will NOT CHECK if you continue in THIS HERESY! The SERVER, the ONE TRUE ROOT SERVER, ... (you get the picture) jms Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Phone: +1 520 324 0494 (voice) +1 520 324 0495 (FAX) jms(a)Opus1.COM http://www.opus1.com/jms Opus One

2 1

Bah.
by Derek Elder 24 Nov '96

24 Nov '96

Sorry for the cross-emails on the last CC. Got a bit overzealous responding to the idiot^H^H^H^H^H^Hgentleman that keeps harping on the root server joke. | Derek Elder http://www.accessus.net V.P., CIO | | djelder(a)accessus.net accessU.S., Inc. 888-637-3638 Ext. 222 |

1 0

Re: First? TRUE Root Name Server On Line
by tor＠wtv.net 24 Nov '96

24 Nov '96

Paul A Vixie wrote: >Your desire to make a distinction between "popular" and "actual" is >dishonest, misleading, ugly, and rude. There are exactly nine root >name servers. Not "popular" root name servers - 9 SERVERS, total: Paul - your peculiar brand of orthodox and narrowly defined reality are not in line with the fluidic and creative nature of the Internet IMHO. Should the people choose to circumvent these silly bottlenecks they will. And then you can rave all you want. My experience is that the citizans of the internet like revolution and love change. And you're sounding awful reactionary and even counter-revolutionary, Paul... Bob Allisat PO Box 191 Station E Toronto Canada M6H 4E2 (416) 588-0670

2 1

new text
by Vadim Antonov 24 Nov '96

24 Nov '96

I posted a white paper text explaining how to build a terabit router in a basement :) Check http://www.pluris.com If you visited the site recently, your browser may show you an old copy of the page. If you do not see a link to the new text, click on "reload" or clear the disk cache. --vadim

1 0

RE: First? TRUE Root Name Server On Line
by Jim Fleming 24 Nov '96

24 Nov '96

On Saturday, November 23, 1996 1:58 PM, Jamie[SMTP:jamie@dilbert.multiverse.com] wrote: @ Jim "Beam me up" Fleming wrote: @ > @ > What do you suggest as a constructive solution ? @ > @ > 1. Would TCP wrappers satisfy you ? @ @ It's your network security you have to worry about. Not me. @ TCP wrappers in coordination with the appropriate filters, restrictions, @ etc., are desirable. @ @ > 2. or, do you think those services should not @ > even be in the inetd repetoire ? @ @ Correct. @ @ > Also, have you checked all of the 9 "popular" root @ > name servers ? Do they conform to your requirements ? @ @ Yes. @ @ Here's a little chart from a three minute discovery. @ @ Server chargen echo daytime discard smtp telnet @ a no no no no no no @ b no no no no no no @ c yes yes yes yes no [2] :( @ d no no no no no [3] @ e no no no no yes [2] @ f [1] [1] [1] [1] [1] [1] @ g no no no no no no @ h no no no no no yes @ i yes yes yes yes no yes :( @ @ [1] This service is filtered at the upstream router (Yay) @ [2] Service is running, but wrappered @ [3] Service is running, but with "go away" warnings. @ @ @ > Can you provide a summary of ALL of the requirements @ > that you would like to see for a root name server ? @ @ Not really, but off of the top of my head I can think of a few things.. @ @ - The server should be running a release of its operating system that @ has been tested and is known to be stable. The server should not @ be running an operating system known to have a history of security @ holes, or "new" operating systems. @ @ - The server should optimally have no less than two points out to the Internet, @ and should be on a network no more than two hops from a major backbone. @ @ - The server should not be running "small tcp" or "small udp" services, @ such as daytime, echo, chargen, comsat, etc. @ @ - The server should not be running any larger tcp services, such as @ ftp, exec, r*, uucp, tftp, etc. . If this is a requirement for @ distribution of the data files, hosts allowed in should be filtered @ at the upstream router as well as via TCP wrappers. @ @ - At the upstream, the router should not be running small services, should @ have source routing disabled and access lists to prohibit anyone other @ than people coming from a select list of authorized hosts at the root @ nameserver. The root nameserver also would optimally be on its own @ small subnet to only include the server itself and the default @ route up (255.255.255.252). @ @ - The machine should not be an open machine : All non-essential accounts @ on the system should be removed, and no users other than root domain name @ administrators should be allowed access. @ @ - The machine should have at least one redundant power supply in case of @ emergency, should have an immediate uninterruptible power supply and @ conditioner, and should optimally have some sort of "long term" @ power backup , such as a diesel generator. @ <trim addresses> Jamie, This is truly a fine piece of work. I hope that you continue to refine your analysis of not only the 9 "popular" Root Name Servers but all of the Root Name Servers. The discussion on the "newdom" list, at one time was focused on the simple objective of configuring more Root Name Servers around the world. Maybe this can be a kick-start to help get everyone refocused on that objective. Thanks for the fine work. I am working on a web site to help people learn more about name servers. It is temporarily at the following address, <http://www.unety.net/Platform>. If you do not mind, I will be happy to incorporate some of your points. If you ever develop a web site, showcasing your analysis talents, let me know. I can add a link and I think that everyone would benefit from the work that you have done. Thanks again, for the nice reply. -- Jim Fleming UNETY Systems, Inc. Naperville, IL e-mail: JimFleming(a)unety.net JimFleming(a)unety.net.s0.g0 (EDNS/IPv8)

2 1

Re: The Cidr Report
by Paul Ferguson 24 Nov '96

24 Nov '96

Maybe the 'Hall of Shame' approach *does* work after all. ;-) - paul At 12:25 PM 11/23/96 PST, Randy Bush wrote: >> Date Prefixes >> 171196 40844 >> 171196 40868 >> 181196 40933 >> 191196 42076 >> 201196 40674 >> 211196 40583 >> 221196 40525 > >Tony, I suspect that you and your weekly report are, in a large part, >responsible for this. I thank you. Our routers thank you. > >Frank, if you're out there, has the curve changed since Tony started >publishing again? > >randy >

1 0