PDA

View Full Version : possible dns issue


dvijen
04-28-2010, 04:43 PM
just read this at dslreports

internet users face the risk of losing their internet connections on 5 May when the domain name system switches over to a new, more secure protocol.

While the vast majority of users are expected to endure the transition to DNSSEC smoothly, users behind badly designed or poorly configured firewalls, or those subscribing to dodgy ISPs could find themselves effectively disconnected...."

»www.theregister.co.uk/2010/04/13/dnssec/
-------------------------------------------------------------------------

tested 156.154.70.1 and 156.154.71.1 (both used by voipo in phone adapter) and the site is not ready for May 5 change. Public dns servers that I use (4.2.2.2., 4.2.2.3, 4.2.2.4) all show ready.

Does this mean the service will be affected if the site does not get ready by then?
dvijen
holmes4
04-28-2010, 05:50 PM
Those IP addresses you show are those your ISP provides - the adapter is just using DHCP. I use OpenDNS and it "fails" the test too, but the OpenDNS people say that things will still work after the 5th.
ctaranto
04-28-2010, 06:12 PM
Those IP addresses you show are those your ISP provides - the adapter is just using DHCP.

Those IP addresses are those coded in the ATA device by VOIPo. I have my VOIPo device (PAP2T) behind a WRT54GL (running Tomato). Comcast provides the WRT54GL DNS servers of 68.87.71.230 and 68.87.73.246. The PAP2T shows 156.154.70.1 for Primary, and Secondary shows 156.154.71.1 192.168.0.1 (no idea why it shows two, but the 2nd is the IP of my WRT54GL).
voipinit
04-29-2010, 07:01 PM
^ dnsadvantage
MisterEd
04-30-2010, 10:11 PM
Sounds like Y2K all over again (and you know how that was a big bust except lots of people made LOTS of money off everyones fear).
holmes4
05-01-2010, 01:19 PM
Actually, it was a lot of hard work by a lot of people that made Y2K seem to be "a bust". My wife was one of these and I know what she put in to it. The average Joe (and news pundits) had no clue.
voipinit
05-02-2010, 02:15 PM
I agree with MisterEd. The bean counters listened to the hype and not their engineers. . .
dvijen
05-03-2010, 03:31 AM
I don't see any comment from voipo yet, would like to know their path forward.
dvijen
scott2020
05-03-2010, 11:33 AM
It might not be a big deal.

http://www.dslreports.com/shownews/Again-DNSSEC-Updates-Shouldnt-Impact-You-108170?nocomment=1
dvijen
05-03-2010, 02:54 PM
It might not be a big deal.

http://www.dslreports.com/shownews/Again-DNSSEC-Updates-Shouldnt-Impact-You-108170?nocomment=1

still doesn't change the fact that as of today, dns server used by phone adapter is not ready for may 5th
ctaranto
05-03-2010, 03:07 PM
Can someone on the VOIPo support staff chime in?
VOIPoTim
05-03-2010, 03:19 PM
We've been told that this is essentially a non-issue by several vendors which is why you don't see it anywhere mainstream. If it were a change that could completely stop all these services, you'd be hearing about it like it was Y2K all over again.

I'm not technical, but from what I understand, the DNSSEC responses are ONLY sent if the nameserver specifically requests them and if they are requested the users that will have issues are ones where their routers don't allow packets of that size through.

So from what I'm being told, if a user is impacted, it'll be their entire connection...not just a VOIPo adapter but it's very unlikely.
ctaranto
05-03-2010, 03:38 PM
Thanks, Dick!
dvijen
05-03-2010, 03:44 PM
We've been told that this is essentially a non-issue by several vendors which is why you don't see it anywhere mainstream. If it were a change that could completely stop all these services, you'd be hearing about it like it was Y2K all over again.

I'm not technical, but from what I understand, the DNSSEC responses are ONLY sent if the nameserver specifically requests them and if they are requested the users that will have issues are ones where their routers don't allow packets of that size through.

So from what I'm being told, if a user is impacted, it'll be their entire connection...not just a VOIPo adapter but it's very unlikely.

That is not my understanding since your adapter does not use isp's dns server. 156.154.70.1 and 156.154.71.1 which adapter is using are not ready for may 5th.
dvijen
VOIPoLucas
05-03-2010, 04:11 PM
That is not my understanding since your adapter does not use isp's dns server. 156.154.70.1 and 156.154.71.1 which adapter is using are not ready for may 5th.
dvijen

Dvijen,

You might find this another useful read:

http://www.dslreports.com/forum/r24168644-

Also, keep in mind you're reading the register ;).
ctaranto
05-05-2010, 07:24 AM
Miracle of miracles - my phone works today! :)