watchNS/gov.au - moin.dnsq.info

watchNS/gov.auについて、ここに記述してください。

au のNSは[abrsuvxyz].au という名前をもつ。

うちwxyzはgovなどのサブドメインのNSでもある。

$ dnsq ns gov.au x.au

2 gov.au:
88 bytes, 1+4+0+0 records, response, authoritative, noerror
query: 2 gov.au
answer: gov.au 86400 NS z.au
answer: gov.au 86400 NS x.au
answer: gov.au 86400 NS y.au
answer: gov.au 86400 NS w.au

$ dnsq a nonexist.gov.au x.au

1 nonexist.gov.au:
95 bytes, 1+0+1+0 records, response, authoritative, nxdomain
query: 1 nonexist.gov.au
authority: gov.au 900 SOA w.au support.ausregistry.com.au 1459489895 1800 300 1814400 1800

$ dnsq a nonexistent.nsw.gov.au x.au

1 nonexistent.nsw.gov.au:
102 bytes, 1+0+1+0 records, response, authoritative, nxdomain
query: 1 nonexistent.nsw.gov.au
authority: nsw.gov.au 900 SOA w.au support.ausregistry.com.au 1459818720 1800 300 1814400 1800

この返答だけだと、gov.auゾーンが存在するかどうかは分からない。

つまり、毒入り gov.au NS 返答が来たら、どうするか迷うはずだ。

ただし、こっちに聞いたひとは分かるはずだが、... 気持ち悪い設定である。

$ dnsq a nonexistent.nsw.gov.au a.au
1 nonexistent.nsw.gov.au:
280 bytes, 1+0+4+8 records, response, noerror
query: 1 nonexistent.nsw.gov.au
authority: gov.au 86400 NS w.au
authority: gov.au 86400 NS x.au
authority: gov.au 86400 NS z.au
authority: gov.au 86400 NS y.au
additional: w.au 86400 A 37.209.192.5
additional: w.au 86400 28 \040\001\015\315\000\001\000\000\000\000\000\000\000\000\000\005
additional: x.au 86400 A 37.209.194.5
additional: x.au 86400 28 \040\001\015\315\000\002\000\000\000\000\000\000\000\000\000\005
additional: y.au 86400 A 37.209.196.5
additional: y.au 86400 28 \040\001\015\315\000\003\000\000\000\000\000\000\000\000\000\005
additional: z.au 86400 A 37.209.198.5
additional: z.au 86400 28 \040\001\015\315\000\004\000\000\000\000\000\000\000\000\000\005