--On 21 October 2009 11:24:08 +0100 Ray.Bellis at nominet.org.uk wrote:
We could simply propose NXDOMAIN.LOCAL.ARPA. as well. If the answer for that comes back the same as for DOMAIN.LOCAL.ARPA, we know we've got an "evil" resolver. :)
True - and that has obvious benefits. However, testing the new nameservers work before installing them is probably not a bad idea, just in case the proxy tries to be "helpful" by transparently intercepting DNS packets not addressed to it (as a small minority of the proxies you tested did). -- Alex Bligh