Re: Warning of major NHS IT overspend

[Ian G Batten <[EMAIL PROTECTED]>]

On Thu, 04 Nov 2004, Peter Tomlinson wrote:

> DNS is a disciplined (OK, self-disciplined) method where data is used 
> all the time by messages coming from all over the world. Errors and 
> service outages are quickly obvious and we all as users expect them to 
> happen from time to time and be quickly fixed by the professionals who 
> operate the nodes in the internet.

Huh?  DNS servers are operated by random punters, and until quite
recently it was trivially easy (by virtue of the undisciplined way in
which DNS daemons blithely accepted additional information records) to
subvert things.  Failures of DNS servers (in the sense that NS records
point to things that aren't actually serving that zone) are absolutely
routine: taking the logs since midnight (it's now 1000ish) I see 246
_unique_ lame servers:

carme:/misc/newlogs/current 10:07:11 (569)
$ sed -n "/lame server/s/.*resolving '\([^']*\)' .*/\1/p" ext-proxy-*.ftel.co.uk/named/INFO  | sort -u | wc -l
     246

ian