Willing and not afraid to challenge the status quo.

Resolver source port behaviour checker

written by Ruan
at 8:28 am
on July 11, 2008
in Security, Technology, Tellicommunications
no comments

In light of the CERT VU#800113 announcement, DNS-OARC has created a special DNS name and server that you can query to determine if your resolver is at risk.

Usage:
dig @4.2.2.3 +short porttest.dns-oarc.net TXT

Replace 4.2.2.3 with your resolvers address. The result will either return FAIR, GOOD or POOR based on the observed deviation of the source ports.

Full details of DNS-OARC test can be seen here.


comments

Leave a Comment...

You must be logged in to post a comment.


about this

Ruan is a resolute technophile that is currently devoted to the professional practice of Information Technology Management. In his free time Ruan pursues various interests including the study of Information Security practices and the exploration of visual culture through contemporary photography and communication design.


fineprint
entire contents © 2010 Ruan Müller