Truman BoyesZeros & Ones

archive · Unix

Checking to see if DNS server is using random ports

By Truman Boyes · · 1 min read

dig +short porttest.dns-oarc.net TXT @localhost [10:39:33 on 08-07-11 : pts/17]
z.y.x.w.v.u.t.s.r.q.p.o.n.m.l.k.j.i.h.g.f.e.d.c.b.a.pt.dns-oarc.net.
“216.254.67.211 is GOOD: 26 queries in 2.7 seconds from 26 ports with std dev 20692.47″

Phil upgraded suspicious.org’s BIND with the latest version after the recent security vulnerability covered by CERT and Dan Kaminsky’s research.

Originally published on truman.net. See the archived copy.