I should probably mention this flaw on the #nslookup flaws page. The BIND DNS client library doesn't continue on to the next server if it receives a response without the "RA" flag; but nslookup does.
A flaw going back to at least 2009, from a quick look at the people asking questions about it, but introduced since I last touched that page in 2004; as I believe I included all of the known major gotchas of the time. (-:
If it's (intentionally) not providing proxy DNS service (which is what "recursion not available" translates to), then you had best just take it out of resolv.conf completely. That's not the sort of DNS server that belongs in resolv.conf.
The resource record set type is actually immaterial here. The C library expects complete answers from things in /etc/resolv.conf, not partial answers, which is what it will be getting from that DNS server.
There are all sorts of things that non-academic but technical people can prepare for, like ensuring that https://github.com/cisagov/dotgov-data/ is cloned outwith the U.S.A. and not on a WWW site run by a U.S.A. multinational, in case someone has the really dumb idea of abusing the #DomainNameSystem to censor stuff.
(Of course they will, doubters. People use the DNS as a blocking tool all of the time. Inexpert political appointees will think the same.)
Technical information at https://mastodonapp.uk/@JdeBP/113927362706833854
Also notice that The Grauniad did not add the www. subdomain.
Here's some technical information that is pertinent to current events. The DNS data for the gov. zone can currently be found in a git repository at https://github.com/cisagov/dotgov-data , which one can clone with the usual tools. Almost none of its on-GitHub forks are up to date. The faa.gov. subdomain is not part of gov. but is delegated to Akamai, with the primary copy of the data apparently held by Akamai. Akamai performed an update to Edge DNS on 2025-01-23, but https://akamaistatus.com reports no Edge DNS incidents since then. Neither faa-mc-egm1.faa.gov. nor faa-ct-egm1.faa.gov. are currently responding to DNS requests from me. dotideahub.gov. is delegated only to those 2. faa.gov. is not delegated to those 2 by the gov. data, but Akamai's servers publish them in the NS record set which will then be cached. www.faa.gov. is a client-side alias for www.faa.gov.edgekey.net. . Of course faa.gov. cannot both have a CNAME and be a delegation point at the same time. #DomainNameSystem #FAA
Here's some technical information that is pertinent to current events.
The DNS data for the gov. zone can currently be found in a git repository at https://github.com/cisagov/dotgov-data , which one can clone with the usual tools.
Almost none of its on-GitHub forks are up to date.
The faa.gov. subdomain is not part of gov. but is delegated to Akamai, with the primary copy of the data apparently held by Akamai.
Akamai performed an update to Edge DNS on 2025-01-23, but https://akamaistatus.com reports no Edge DNS incidents since then.
Neither faa-mc-egm1.faa.gov. nor faa-ct-egm1.faa.gov. are currently responding to DNS requests from me.
dotideahub.gov. is delegated only to those 2.
faa.gov. is not delegated to those 2 by the gov. data, but Akamai's servers publish them in the NS record set which will then be cached.
www.faa.gov. is a client-side alias for www.faa.gov.edgekey.net. .
Of course faa.gov. cannot both have a CNAME and be a delegation point at the same time.
Hello everyone.
In today's article, we will examine in detail what is dns and how it works.
I wish everyone a good reading:
https://denizhalil.com/2023/07/04/what-is-dns-an-overview-of-the-domain-name-system/
#dns #domainnamesystem #networksecurity #dnssecurity #dnsrecords #dnsconfiguration
This is the magazine article I had written for the PECB and as you can see, it’s ready to be published into the magazine. This is gonna be good. Images are in low resolution because they still need to purchase it before publication.
#Magazine #PECB #Certification #CertificationBody #InfoSec #InformationSecurity #InfoSecExpert #InformationSecurityExpert #ISP #InternetServiceProvider #Safcomms #SafcommsLimited #DNS #DomainNameSystem #MagazineArticle #Writer #InfoSecMag #CyberSecMag #InformationSecurityMagazine #CyberSecurityMagazine #Mag
We, at Safcomms Limited, are now fully registered to do work with the United States Federal Government.
Our Entity Identification Information on the Federal System is as follows:
CAGE Code: U28H3
SAM ID: RPSNFL4DZ7N3
We are now ready to receive contract opportunities as necessary by the US Federal Government and propose to contracts as contractors for the Federal Government.
The FBI seems unresponsive to wanting to work with us on Federal Contracts. Nonetheless, I’m sure the NSA and other branches of the Federal Government would be willing and open to work with us. Nonetheless, we are yet working on future plans to work with them with a decision that may take weeks to months before a final decision is made for the company to work with the NSA and other higher hierarchies of the Federal Government of the United States as there’s still systems to setup for the company and other complications which the FBI is made aware of and cannot be stated as it’s confidential and significant to National and International Security.
#Government #Contracting #GovernmentContractor #Subcontractor #Federal #FederalContractor #Civilian #CivilianContractor #FederalGovernment #UnitedStates #USA #UnitedStatesofAmerica #NSA #FBI #Contract #Fed #National #International #Security #SAMGov #SAM #SystemforAwardsManagement #NationalSecurity #InternationalSecurity #NatSec #IntSec #IntlSec #ISP #InternetServiceProvider #DNS #DomainNameSystem #Quantum #QuantumSystem #QuantumComputing #QuantumComputer #echarging #electroniccharging #wirelesscharging
Safcomms Limited DNS now comes with secure masking. We help mask your IP Address by providing you with ours to hide yourself without using a VPN. To purchase our DNS Service, contact me right away. Evidence as shown in the picture from the WiFi Analyzer Software.
#DNS #DomainName #DomainNameSystem #InternetService #Internet #InternetServiceProvider #Networking #ComputerNetworking #ComputerNetwork #Network #Cybersecurity #CyberSec #InformationSecurity #InfoSec #Masking #HidingYourIP #HideYourIP #NoVPN #NoIP #IPSec
In my experience, not understanding how the DNS works (as opposed to merely what the DNS does) is quite common.
JdeBP
JdeBP
halil deniz
Alameen KarimMerali 