Latest posts
| Blog | Age | Hits | Title |
|---|---|---|---|
| Stephane Bortzmeyer | 224d | 35 | RFC 9945: IETF Community Moderation Comme toute organisation humaine, l'IETF doit gérer le cas de personnes pénibles, qui font perdre du temps à tout le monde, mettent une mauvaise ambiance ou cherchent activement à perturber le travail commun. Ce RFC (qui... |
| DNS reddit | 224d | 35 | Common mistakes when publishing DMARC records? While working on email authentication setups recently, I noticed that many DMARC issues are actually caused by small DNS configuration mistakes rather than mail server problems.
Some common things I’ve seen when... |
| DNS reddit | 226d | 42 | why does one.one.one.one resolve to Cloudflare but one.one.. I’m trying to understand how DNS hierarchy works with domains like this.
if i run: ping one.one.one.one
it resolves to Cloudflare’s IP.
But if I run: ping one.one
it resolves to a completely different IP (not... |
| Stephane Bortzmeyer | 226d | 36 | RFC 9923: The FNV Non-Cryptographic Hash Algorithm L'algorithme de condensation FNV, présenté dans ce RFC n'est pas neuf (et certains disent même qu'il est dépassé). Mais il est utilisé par de nombreux logiciels alors qu'il n'avait jamais été spécifié « proprement ».... |
| DNS reddit | 226d | 44 | The Instance Is Up. Or Is It? Health Checking in... submitted by /u/Nobody-gcn
[link] [comments] |
| DNS reddit | 227d | 33 | IPv6 reverse DNS submitted by /u/ninmuzz
[link] [comments] |
| Stephane Bortzmeyer | 227d | 24 | RFC 9925: Unsigned X.509 Certificates Un certificat est signé par une AC, normalement, ou à la rigueur auto-signé, ce qui ne sert pas à grand'chose mais est obligatoire dans X.509. Mais voici que ce RFC rend la signature facultative. |
| Stephane Bortzmeyer | 228d | 22 | Échange de clés, encapsulation de clés, transport de clés... Comme j'écris souvent des articles où je parle de cryptographie, alors que je ne connais pas grand'chose à la cryptographie moderne (et un peu plus à la cryptographie antique), je me suis demandé quelle était la... |
| ISC.org | 228d | 25 | Claude Code Experiments with BIND 9 During the first week of February (2026), I ran several experiments using Claude Code. |
| DNS reddit | 228d | 34 | Best free dns with hagezi tif and pro plus in it ? I’m searching for something unlimited with the adblocking i ask im the title anyone have a idea? Also encrypted. submitted by /u/TrapNouz
[link] [comments] |
| DNS reddit | 228d | 23 | DNSSEC today: automation is best current practice DNSSEC has been around for 20+ years — so why isn’t it everywhere yet?
Our new piece at APNIC highlights the real blocker: complex, manual processes that make deployment harder than it should be.
The opportunity?... |
| DNS reddit | 228d | 35 | DNS Command & Control: Detecting Malware Traffic David Bombal and Chris Greer DNS deep dive. submitted by /u/wreditor
[link] [comments] |
| DNS reddit | 229d | 22 | Connected but no Internet. (DNS Error) Hello! anyone know how I can fix 'cant reach DNS server'. After days of research, I found out that I'm not the only one who encountered this problem and I think the reason for this problem is due to my VPN that I use for... |
| ISC.org | 229d | 20 | Stork 2.4: Open Source DHCP Management Tool Stork 2.4 is a new stable version, significantly updated in several key ways. |
| Tony Finch | 229d | 26 | nsnotifyd-2.4 released The nsnotifyd daemon monitors a set of DNS zones and runs a command when any of them change. It listens for DNS NOTIFY messages so it can respond to changes promptly. It also uses each zone’s SOA refresh and retry... |
| DNS reddit | 229d | 33 | How DNS Works Under the Hood (Packet by Packet) Chris Greer just posted another great DNS video. submitted by /u/wreditor
[link] [comments] |
| DNS reddit | 229d | 31 | DNS trace tool I just added a DNS trace tool to Wirewiki.
It does a full trace from the root servers to the target domain name and checks all name servers along the way. Both IPv4 and IPv6.
If servers within a zone disagree, it'll... |
| DNS reddit | 229d | 29 | DNS is Beautiful I built this because I kept needing to share DNS configurations with clients and the sites were either:
So extra technical and severe looking they got confused.
Covered in ads which made it seem very cheap (actually... |
| DNS reddit | 229d | 26 | When checking nameserver changes, how do you verify... I’ve noticed that nameserver changes sometimes appear inconsistent across resolvers during domain migrations.
Some tools show updated NS records quickly, others lag depending on cache and resolver.
For those managing... |
| NLnet Labs | 229d | 26 | Smaller, faster: NSD's refactored RDATA storage and... On the 4th of December, NSD 4.14.0 was released with refactored RDATA storage, reducing the memory footprint of NSD. In this post we ll show the effect of this refactoring, what sort of zones benefit the most from it,... |
Blogs
DNSsexy- Ask Mr. DNS
- DNS reddit
- DomainIncite (Kevin Murphy)
- ISC.org
- Jan-Piet Mens
- Miek Gieben
- NLnet Labs
- PowerDNS Blog
- Stephane Bortzmeyer
- Tony Finch
Blog submission
Send any DNS blog that you feel adds value to the DNS community. Final decisions rest with me.
- First & Last names
- Blog name
- Blog URL
- Feed URL
About
DNSsexy is an aggregation of DNS related blogs and news. It is built, edited and maintained by Jan-Piet Mens with substantial contributions by Carsten Strotmann.
Resources
Servers
- (downloads)
- BIND
- dnsmasq
- DNSSHIM
- dnsxd
- gdnsd
- grong
- Knot-DNS
- MyDNS (NG)
- NSD
- PowerDNS
- Unbound
- Y:A:D::I::F:A
Utilities
Monitoring
- AFNIC ZoneCheck
- dnssec-monitor
- DNSSEC-Trigger
- jdnssec-verifyzone
- key-checker
- Keychecker
- ldns-verify-zone
- nagval
- OpenDNSSEC auditor
- OpenDNSSEC monitor
- SurfNet DNSSEC Checker
- validns
- Vantages D-Sync
- YAZVS
Libraries
- .NET DNS Class
- BIND10
- c-ares
- dns.c
- dns_erlang
- dnsjava
- dnspython
- DnsQuery
- dnsruby
- GNU adns
- godns
- ldns
- ldnsx
- Library DNS
- libval
- Net::DNS
- nss-ubdns
- PyUnbound
- RULI
Books
- Alternative DNS Servers
- BIND 9 DNS Administration Reference Book
- DNS & Bind
- DNS and BIND on IPv6
- DNS related RFCs
- DNSSEC Mastery with BIND
- DNSSEC reference card
- DNSSEC Specifications
- Pro DNS and BIND