Hi, On Tue, Apr 24, 2018 at 04:25:59PM +0100, Jim Reid wrote:
Thanks Job. Though I wasn???t thinking (or caring) about github crapware. I was thinking about stuff that might have been written for internal use -- say at an ISP -- and would only show up whenever these scripts or whatever made queries for ns-v6.ripe.net.
I would say that such software needs to be broken, often, and hard. There is never a reason to hardwire the hostname of other people's DNS servers in your software, except if said software does special DNS checks ("is this list of servers that I expect to be authoritative for my zones up to date?"). And even for those cases, the software should consult what is in the delegation records, not "a hardwired list"... (I won't say we do not have something, somewhere, that assumes that there is a ns-v6.ripe.net - but if we have, it needs to explode so we can find and repair it) OTOH it might be worth some considerations about "soft landing" - that is, point ns-v6.ripe.net at a new server that logs queries, respons to everything with SERVFAIL (or forwards to ns.ripe.net?), and if you see significant traffic, contact the sender and notify them of the coming end... Gert Doering -- writer of scripts that do stupid things -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Emmer Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279