Open Dns Servers Failed

Customer Support Customer Only Discussion
1

I am not sure if this means anything or if you need to know this, I just happen to run into it looking for info for a client.

This info came up in a DNS Report

Open DNS servers ERROR: One or more of your nameservers reports that it is an open DNS server. This usually means that anyone in the world can query it for domains it is not authoritative for (it is possible that the DNS server advertises that it does recursive lookups when it does not, but that shouldn’t happen). This can cause an excessive load on your DNS server. Also, it is strongly discouraged to have a DNS server be both authoritative for your domain and be recursive (even if it is not open), due to the potential for cache poisoning (with no recursion, there is no cache, and it is impossible to poison it). Also, the bad guys could use your DNS server as part of an attack, by forging their IP address. Problem record(s) are:
Server 204.14.104.150 reports that it will do recursive lookups. [test]
Server 204.10.105.200 reports that it will do recursive lookups. [test]

2

any dns server can be queried for a domain. All you have to do, is register a certain domain on your Registrar, and point it to any dns server in the world.

Basically, you cannot stop people from telling the Registrar the authoritative dns server for their domains (even if it?s a lie).

His job (the server) is to deny the query if they are not authoritative, or otherwise send the query to the proper server.

3

This is new to dnsreport, also I find it odd that on the main jh domain it now FAILS with multiple MX record, and it used to WARN if only one, now it only passes if one record.

4

Seems you guys are using Postini for your mail ?(

5

Yes, we are testing postini.

Also, the recursive DNS will be disabled soon, we are just checking all internal servers to make sure they are not using them.