North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

simple way to fix Verisign DNS issues

  • From: John Brown
  • Date: Tue Sep 16 14:16:22 2003 
Ok, so the Verisign issue seems to impact a number of
various things.

1. RBL's
2. Testing scripts
3. MX and mail handling
4. Taking eyeballs and possible revenue away from others


I think the solution is quite simple.

Each provider that is unhappy with this should stand up
a ANYCAST server that answers on this IP.  

Use Zebra to inject AS 30060 into your network and
have it goto a machine that simply answer NXDOMAIN.

Have that DNS server(s) answer the same way "it should"
or "the way you want"

Make sure you tag the route with NO-EXPORT :)

If you are a hosting company, you could redirect them
to your "Buy Domains Now" page.  Verisign is HELPING YOU
get more customers.  All you need is a few stewpid router
tricks and poof you are set.



I've stood up two anycast servers today and its working 
nicely.  The DNS server just answers like it should.

Heck you could have this server also become a AS112 
box for your network as well.  Kill two birds with one
,er two zebras

Cheers