Credentia Technology

DNS Tools & Information

Here you will find links to tools, services, software etc. that enable the properation operation of DNS. There are many things that can go wrong with DNS, if one does not understand the delegation system or read RFCs.

DNS on Linux [Presentation]

PDF slides from a Apr-2007 presentation given at LinuxFest Northwest (pdf format).

Applied DNS [Presentation]

Slides from a Nov-2004 presentation given at the Seattle BSD Users Group meeting. An examination of issues with operating a DNS server running BIND 8 or 9, with emphasis on the topics of recursion, delegation, security, best-practices and troubleshooting. Available in [html] or [pdf] format.

ccTLD Delegation Status [Research]

This page is updated every 4 hours, and contains a status report of each and every ccTLD delegation.

Root Zone Deltas [Research]

Once a day we download the root . zone and check it into revision control (RCS). Then we make the RCS file available to interested parties.

Zone Serial Checker [Tool]

A simple utility to check DNS SOA serial numbers for a given zone on multiple name servers, whether published or not. It also checks for some common misconfigurations such as recursion availability. Requires Perl, Net::DNS and Date::Calc modules.

DNS Geo [Tool]

This tool approximates the geographic locations of various TLDs name servers.

DNS Report [Tool]

A very large percentage of domains have DNS problems; this report will help you find those problems and fix them.

DNS Check [Tool]

dnscheck is a service which verifies the quality of delegations in DNS.

DNS Stuff [Tool]

DNS Stuff provides some quick and easy domain, hostname and IP tests.

Doc [Tool]

Doc is an automated tool for verifying (to an extent) that a domain is configured and functioning correctly. It makes no attempt to validate the data inside a domain, only the structure.

DNS Poison [Tool]

Harmless test to see if you are vulnerable to cache poisoining attacks. Some DNS servers can be tricked into believing false authority records for certain domain names. It seems to be the default behavior on Windows XP and others.
by Ketil Froyn

DNS Cache Snooping [Research]

This research paper presents an explanation of the technique known as DNS cache snooping. A number of different exposure scenarios are explained. Includes recommendations on mitigation.
by Luis Grangeia

DNSdoctor [Tool]

DNSdoctor will perform several tests on a domain to ensure that it is correctly configured.


Home Page Certificates Services Research Technology Clients Repository Contact	Home - Technology - DNS
	Credentia Technology DNS Tools & Information Here you will find links to tools, services, software etc. that enable the properation operation of DNS. There are many things that can go wrong with DNS, if one does not understand the delegation system or read RFCs. DNS on Linux [Presentation] PDF slides from a Apr-2007 presentation given at LinuxFest Northwest (pdf format). Applied DNS [Presentation] Slides from a Nov-2004 presentation given at the Seattle BSD Users Group meeting. An examination of issues with operating a DNS server running BIND 8 or 9, with emphasis on the topics of recursion, delegation, security, best-practices and troubleshooting. Available in [html] or [pdf] format. ccTLD Delegation Status [Research] This page is updated every 4 hours, and contains a status report of each and every ccTLD delegation. Root Zone Deltas [Research] Once a day we download the root . zone and check it into revision control (RCS). Then we make the RCS file available to interested parties. Zone Serial Checker [Tool] A simple utility to check DNS SOA serial numbers for a given zone on multiple name servers, whether published or not. It also checks for some common misconfigurations such as recursion availability. Requires Perl, Net::DNS and Date::Calc modules. DNS Geo [Tool] This tool approximates the geographic locations of various TLDs name servers. DNS Report [Tool] A very large percentage of domains have DNS problems; this report will help you find those problems and fix them. DNS Check [Tool] dnscheck is a service which verifies the quality of delegations in DNS. DNS Stuff [Tool] DNS Stuff provides some quick and easy domain, hostname and IP tests. Doc [Tool] Doc is an automated tool for verifying (to an extent) that a domain is configured and functioning correctly. It makes no attempt to validate the data inside a domain, only the structure. DNS Poison [Tool] Harmless test to see if you are vulnerable to cache poisoining attacks. Some DNS servers can be tricked into believing false authority records for certain domain names. It seems to be the default behavior on Windows XP and others. by Ketil Froyn DNS Cache Snooping [Research] This research paper presents an explanation of the technique known as DNS cache snooping. A number of different exposure scenarios are explained. Includes recommendations on mitigation. by Luis Grangeia DNSdoctor [Tool] DNSdoctor will perform several tests on a domain to ensure that it is correctly configured.
Comments or questions? Email webmaster@credentia.cc ©2003-2009 Credentia, All Rights Reserved