Some broadband providers here in .br seems to be blocking access to the dns-oarc.net test zone (but not to the portal site); most thought it was intended behavior by those providers (hiding instead of patching), but you are right, someone might have corrupted the test zone itself, which aleviates the pressure on the provider to patch it which in turn keeps the exploits working for more time. Rubens On Thu, Jul 24, 2008 at 3:45 PM, Scott Berkman <scott.berkman@reignmaker.net> wrote:

Is it just me or is the test page below down now?

Or maybe some poisoned the NS record for dns-oarc.net and sent it to nowhere to stop testing! (J/K since I can get to the rest of the page fine).

-Scott

-----Original Message----- From: Ken A [mailto:ka@pacific.net] Sent: Thursday, July 24, 2008 2:40 PM To: Steve Tornio Cc: nanog@merit.edu Subject: Re: Paul Vixie: Re: [dns-operations] DNS issue accidentally leaked?

Steve Tornio wrote:

...

On Jul 24, 2008, at 12:17 PM, Duane Wessels wrote:

...

...

xpara.com tests to lock up my iPhone, or I would use that checker to verify the iPhone DNS. Anyone have a link to a decent test that I could run on the iPhone?

Give this one a try:

http://entropy.dns-oarc.net/test/

In this test, my iPhone reports:

209.183.33.23 Source Port Randomness: GREAT 209.183.33.23 Transaction ID Randomness: GREAT

I encourage anyone else concerned with their providers to actually test them instead of taking anyone's word for it.

Steve

on AT&T you might want to run it more than once.. Mine shows POOR 1 out of 5 times. :-( Hope they finish patching sooooon! Ken

-- Ken Anderson Pacific.Net