bortzmeyer’s gists

bortzmeyer / dp-france.md

Created November 30, 2018 09:50

Censure d(un site nazi en France

Vu avec les sondes RIPE Atlas, pour tester le résolveur DNS menteur.

Orange filtre et redirige vers localhost (104.27.184.150 104.27.185.150 sont les vraies adresses, chez Cloudflare)

%  blaeu-resolve --type A --requested 100  --as 3215 democratieparticipative.biz
[127.0.0.1] : 89 occurrences 
[104.27.184.150 104.27.185.150] : 8 occurrences 
Test #17692118 done at 2018-11-30T08:40:58Z

bortzmeyer / dp-belgique.md

Created November 27, 2018 20:53

Censure d'un site nazi en Belgique

% blaeu-resolve -r 100 -c BE -q A  democratieparticipative.biz 
[104.27.184.150 104.27.185.150] : 34 occurrences 
[213.224.83.39] : 17 occurrences 
[193.191.245.56] : 38 occurrences 
Test #17621900 done at 2018-11-27T20:50:20Z

[104.27.184.150 104.27.185.150] : le vrai
[213.224.83.39] : Telenet

bortzmeyer / xname-dead.md

Created November 4, 2018 13:41

Xname is dead

% check-soa -i xname.org
ns0.xname.org.
	195.234.42.1: ERROR: read udp 10.10.86.133:49337->195.234.42.1:53: i/o timeout
ns1.xname.org.
	178.33.255.252: OK: 2014090801 (8 ms)
ns2.xname.org.
	2a01:e0b:1:153:ca0a:a9ff:fef1:b02b: ERROR: read udp [2001:67c:1348:7::86:133]:49658->[2a01:e0b:1:153:ca0a:a9ff:fef1:b02b]:53: i/o timeout
	212.129.57.31: ERROR: read udp 10.10.86.133:38831->212.129.57.31:53: i/o timeout
ns3.xtremeweb.de.

bortzmeyer / exodus-privacy-eu-org.md

Created November 4, 2018 10:11

Name servers of exodus-privacy.eu.org

% blaeu-resolve --type NS --requested 20 exodus-privacy.eu.org
[cabale.usenet-fr.net. ns.frmug.org.] : 19 occurrences 
Test #17027997 done at 2018-11-04T10:09:57Z

bortzmeyer / root-rollover.md

Created October 11, 2018 13:14

Root DNSKEY rollover

Before :

% dig +tcp +dnssec @a.root-servers.net DNSKEY .

; <<>> DiG 9.10.3-P4-Debian <<>> +tcp +dnssec @a.root-servers.net DNSKEY .
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60720

bortzmeyer / cloudflare-free.md

Created September 29, 2018 07:02

Résolveur DNS de Cloudflare depuis Free

% blaeu-resolve -r 100 --as 12322 --nameserver 1.1.1.1 www.afnic.fr
Nameserver 1.1.1.1
[2001:67c:2218:30::24] : 99 occurrences 
Test #16394786 done at 2018-09-29T07:00:49Z

bortzmeyer / npmjs.md

Created August 31, 2018 15:25

NPM problem

Seen by RIPE Atlas probes:

% blaeu-resolve -r 100 -q A npmjs.com 
[ERROR: SERVFAIL] : 19 occurrences 
[34.208.205.7] : 80 occurrences 
Test #15891829 done at 2018-08-31T15:24:23Z

bortzmeyer / westpoint.md

Created August 29, 2018 07:26

Westpoint moved to Microsoft cloud

% blaeu-resolve --requested 100 --country US --displayvalidation --type A westpoint.edu
[ERROR: SERVFAIL] : 75 occurrences 
[143.69.2.10] : 23 occurrences 
Test #15852311 done at 2018-08-29T07:24:59Z

bortzmeyer / numericable-resolvers.md

Created August 23, 2018 05:52

Test si les résolveurs chez SFR sont menteurs

% blaeu-resolve --nameserver 89.2.0.1 --as 21502 --requested 20 www.doesnotexistatall.com 
Nameserver 89.2.0.1
[ERROR: NXDOMAIN] : 20 occurrences 
Test #15780500 done at 2018-08-23T05:49:43Z

% blaeu-resolve --nameserver 89.2.0.2 --as 21502 --requested 20 www.doesnotexistatall.com
Nameserver 89.2.0.2
[ERROR: NXDOMAIN] : 20 occurrences 
Test #15780503 done at 2018-08-23T05:50:36Z

bortzmeyer / bananarepublic.md

Created July 24, 2018 08:18

Banana Republic

% check-soa -i bananarepublic
ns1.dns.nic.bananarepublic.
	2610:a1:1071::16: OK: 1494557885 (13 ms)
	156.154.144.22: OK: 1494557885 (23 ms)
ns2.dns.nic.bananarepublic.
	2610:a1:1072::16: OK: 1494557885 (13 ms)
	156.154.145.22: OK: 1494557885 (23 ms)
ns3.dns.nic.bananarepublic.
	2610:a1:1073::16: OK: 1494557885 (10 ms)

Stéphane Bortzmeyer bortzmeyer