## page was renamed from watchNS/akadns.net = watchNS/akadns.net = akamaiのDNSがいかにおそろしい設定をしているか、見てみよう。 == sample domain name == www.microsoft.com-c-2.edgekey.net.globalredir.akadns.net == akadns.net == {{{ $ dnsq ns akadns.net a.gtld-servers.net 2 akadns.net: 333 bytes, 1+0+10+5 records, response, noerror query: 2 akadns.net authority: akadns.net 172800 NS a3-129.akadns.net authority: akadns.net 172800 NS a7-131.akadns.net authority: akadns.net 172800 NS a11-129.akadns.net authority: akadns.net 172800 NS a1-128.akadns.net authority: akadns.net 172800 NS a9-128.akadns.net authority: akadns.net 172800 NS a5-130.akadns.org authority: akadns.net 172800 NS a13-130.akadns.org authority: akadns.net 172800 NS a28-129.akadns.org authority: akadns.net 172800 NS a12-131.akadns.org authority: akadns.net 172800 NS a18-128.akadns.org additional: a3-129.akadns.net 172800 A 96.7.49.129 additional: a7-131.akadns.net 172800 A 23.61.199.131 additional: a11-129.akadns.net 172800 A 84.53.139.129 additional: a1-128.akadns.net 172800 A 193.108.88.128 additional: a9-128.akadns.net 172800 A 184.85.248.128 }}} なぜか、net/orgのNSしかない。 == 一段ずつ進めて、zone cutを探索 == $ dnsq ns globalredir.akadns.net a1-128.akadns.net {{{ 67 bytes, 1+1+0+0 records, response, noerror query: 2 globalredir.akadns.net answer: globalredir.akadns.net 300 CNAME a23.g.akamai.net }}} $ dnsq a net.globalredir.akadns.net a1-128.akadns.net1 {{{ 71 bytes, 1+1+0+0 records, response, noerror query: 1 net.globalredir.akadns.net answer: net.globalredir.akadns.net 300 CNAME a23.g.akamai.net }}} $ dnsq ns edgekey.net.globalredir.akadns.net a1-128.akadns.net {{{ 79 bytes, 1+1+0+0 records, response, noerror query: 2 edgekey.net.globalredir.akadns.net answer: edgekey.net.globalredir.akadns.net 300 CNAME a23.g.akamai.net }}} $ dnsq ns com-c-2.edgekey.net.globalredir.akadns.net a1-128.akadns.net {{{ 2 com-c-2.edgekey.net.globalredir.akadns.net: 87 bytes, 1+1+0+0 records, response, noerror query: 2 com-c-2.edgekey.net.globalredir.akadns.net answer: com-c-2.edgekey.net.globalredir.akadns.net 300 CNAME a23.g.akamai.net }}} このあたりくれば、さすがになにかおかしい、と気づくはず。-- ToshinoriMaeno <>