NameSilo

Major DNS changes on Feb 1

Labeled as alert in Warnings and Alerts started by Paul Buonopane, Jan 19, 2019.

Replies:
51
Views:
5,396

  1. Paul Buonopane

    Paul Buonopane CTO, NamePros CTO VIP

    Posts:
    1,267
    Likes Received:
    2,113
    DNS Flag Day is February 1, 2019--that's just two weeks one week from today. If your domain names use DNS servers that aren't ready, they'll be slow or entirely unavailable to a large percentage of the internet.

    If you have multiple domain names with the same nameservers, you only need to test one in the group. For example, if half of your domains use GoDaddy's nameservers and another half use Dynadot's, you only need to test two domains, one for each provider.

    Test your DNS provider's configuration here (simple) or here (technical).

    Edit: Note that if these tests report "minor problems," there's no need for concern unless you operate the nameservers in question. Problems categorized as minor shouldn't cause immediate problems on Feb 1, but aren't ideal long-term. For example, in some cases, they might make it easier for attackers to abuse the affected nameservers.
     
    Last edited: Jan 25, 2019
    The views expressed on this page by users and staff are their own, not those of NamePros.
  2. equity78

    equity78 Top Member TLDInvestors.com TheDomains Staff PRO Gold Account VIP ★★★★★★★★★★

    Posts:
    12,317
    Likes Received:
    9,709
    Thanks Paul, so I checked a domain that's using BrandBucket nameservers and got: Serious problem detected! SLOW

    This domain will face issues after the 2019 DNS flag day. It will work in practice, BUT clients will experience delays when accessing this domain. We recommend you request a fix from your domain administrator! You can refer them to https://dnsflagday.net/ and
    technical report https://ednscomp.isc.org/ednscomp/038f49194a

    So this means BrandBucket needs to get to work?
     
  3. Jurgen Wolf

    Jurgen Wolf Top Member VIP ★★★★★★★★★★

    Posts:
    8,293
    Likes Received:
    6,392
  4. Paul Buonopane

    Paul Buonopane CTO, NamePros CTO VIP

    Posts:
    1,267
    Likes Received:
    2,113
    Most likely. BrandBucket.com uses Cloudflare, so their own site should be unaffected, but the nameservers they give to their customers are hosted on AWS EC2 and may need to be updated.
     
  5. vravis9

    vravis9 Established Member

    Posts:
    1,272
    Likes Received:
    1,188
    @Paul Buonopane thanks...

    I saw same for Undeveloped and ParkingCrew and also for GoDaddy...

    Minor problems detected..
     
    Last edited: Jan 19, 2019
  6. Paul Buonopane

    Paul Buonopane CTO, NamePros CTO VIP

    Posts:
    1,267
    Likes Received:
    2,113
    These are probably safe to ignore. They're not ideal, but they shouldn't cause any immediate issues. In most cases, delays in fixing these problems won't be cause for concern.
     
    Last edited: Jan 19, 2019
  7. Jurgen Wolf

    Jurgen Wolf Top Member VIP ★★★★★★★★★★

    Posts:
    8,293
    Likes Received:
    6,392
    No problems at all with cloudns.net
    Status: OK
     
  8. indiegrind

    indiegrind Established Member

    Posts:
    373
    Likes Received:
    990
  9. tonyk2000

    tonyk2000 Top Member VIP ★★★★★★★★★★

    Posts:
    1,032
    Likes Received:
    1,251
    Namesilo DNS (dnsowl) shows a bunch of warnings...
    @namesilo
     
  10. Furquah

    Furquah Skipper VIP

    Posts:
    3,317
    Likes Received:
    2,317
    Brandpa was down & still to slow
     
  11. simmplex

    simmplex Member PRO VIP ★★★★★★★★★★

    Posts:
    125
    Likes Received:
    72
    @Dynadot

    Test your domainDomain name (without www):
    Testing completed:
    dynadot.com: Fatal error detected!
     
    Last edited: Jan 19, 2019
  12. cipcip

    cipcip Top Member VIP ★★★★★★★★★★

    Posts:
    1,592
    Likes Received:
    700
    Yeah, I just use dynadot nameservers and... Fatal error detected and will stop working according to them.
    But, I am sure that they will do something about this. @Dynadot
     
  13. AGAME

    AGAME Top Member VIP

    Posts:
    1,920
    Likes Received:
    2,837
    Was this something that was known for a while that would change? Or is it something that was thrown upon the DNS world without much notice?
     
  14. cipcip

    cipcip Top Member VIP ★★★★★★★★★★

    Posts:
    1,592
    Likes Received:
    700
    It is the first time i found out, from this thread...
     
  15. ultradog

    ultradog Established Member

    Posts:
    330
    Likes Received:
    333
    It was posted on WebmasterWorld only a couple of days ago.
     
  16. NYJimbo

    NYJimbo Domain Re-Animator

    Posts:
    2,193
    Likes Received:
    3,850
    Dont worry about the "slow", thats usually resolving multiple dns servers. Just check the outputs as each dns server is interrogated during the test.
     
  17. NYJimbo

    NYJimbo Domain Re-Animator

    Posts:
    2,193
    Likes Received:
    3,850
    Nobody I know knew about it until this week. I think its really for broken dns servers running very old dns software or custom dns software that does not follow standard rules. I have some dns servers running BIND 9.9.x that pass the test and those are old.

    This reminds me of when SPF/DKIM was going to break the internet email system if you didnt upgrade. Its been in use for years now and most servers still do not use either.

    I think if this DNS change was going to be so destructive it would be front page news and even your grandmother would have heard about it.
     
    Last edited: Jan 19, 2019
  18. Jurgen Wolf

    Jurgen Wolf Top Member VIP ★★★★★★★★★★

    Posts:
    8,293
    Likes Received:
    6,392
    Absolutely all major email providers are using SPF/DKIM/DMARC.
     
  19. NYJimbo

    NYJimbo Domain Re-Animator

    Posts:
    2,193
    Likes Received:
    3,850
    Nobody is preventing you from sending mail if you/your isp does not use them. It may be enabled on major providers, but you do not need it.
     
    Last edited: Jan 19, 2019
  20. Jurgen Wolf

    Jurgen Wolf Top Member VIP ★★★★★★★★★★

    Posts:
    8,293
    Likes Received:
    6,392
    This is not about sending...
    Those policies control how such emails will be delivered to the receiver.
     
  21. NYJimbo

    NYJimbo Domain Re-Animator

    Posts:
    2,193
    Likes Received:
    3,850
    If you do not use SPF/DKIM on your sending server you will not be blocked by the major providers that do use them. So lack of using them on your sending server did not break anything as they told us back then it would.
     
  22. Jurgen Wolf

    Jurgen Wolf Top Member VIP ★★★★★★★★★★

    Posts:
    8,293
    Likes Received:
    6,392
    Yes, but if lack of such records - then you are under risk that emails FROM YOUR NAME can be sent by anybody in the world... and they will be delivered.
     
    Last edited: Jan 19, 2019
  23. NYJimbo

    NYJimbo Domain Re-Animator

    Posts:
    2,193
    Likes Received:
    3,850
    ONLY if the receiving server follows SPF/DKIM rules and looks them up in DNS. They only do that IF your DNS has sending server SPD/DKIM records enabled. Its kind of silly when you think about it.

    My post was that lacking this on your DNS for the sending server did not break anything.

    I'm not going to argue with you if its prudent to have it, that was not the point of my post.
     
    Last edited: Jan 19, 2019
  24. Jurgen Wolf

    Jurgen Wolf Top Member VIP ★★★★★★★★★★

    Posts:
    8,293
    Likes Received:
    6,392
    NO.
    If lack of records - then this will be interpreted as NEUTRAL.
    So all emails (including spammers/phishers FROM YOUR NAME) will be delivered to the recipients.
     
  25. NYJimbo

    NYJimbo Domain Re-Animator

    Posts:
    2,193
    Likes Received:
    3,850
    Which means it does NOT break anything if you do not have them. That was the point.
    I'm not going to get into semantics. Lacking SPF/DKIM on your end does not break anything talking to a SPF/DKIM enabled server.

    Have a nice day.
     
    Last edited: Jan 19, 2019

Want to reply or ask your own question?

It only takes a minute to sign up – and it's free!
Topics / Tags:

Share This Page

NameWorth
  1. NamePros uses cookies and similar technologies. By using this site, you are agreeing to our privacy policy, terms, and use of cookies.
    Dismiss Notice
Loading...