1. DNS/毒盛/AncillaryDataAttacks/1.1.1.1/glocalism.jp

1.1. 前提

ns-a1.conoha.io.        21478   IN      A       157.7.225.68
ns-a2.conoha.io.        21599   IN      A       150.95.23.148
ns-a3.conoha.io.        21599   IN      A       103.234.169.68

Contents

  1. DNS/毒盛/AncillaryDataAttacks/1.1.1.1/glocalism.jp
    1. 前提
    2. value-domain 返答

1.2. value-domain 返答

この返事は気持ちわるい。* ns-a1.conoha.io A レコードに注目。 

$ dig +norec -t ns glocalism.co.jp @ns1.value-domain.com

; <<>> DiG 9.11.3-1ubuntu1.12-Ubuntu <<>> +norec -t ns glocalism.co.jp @ns1.value-domain.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7788
;; flags: qr aa; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 2

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1680
;; QUESTION SECTION:
;glocalism.co.jp.               IN      NS

;; ANSWER SECTION:
glocalism.co.jp.        1200    IN      NS      ns-a1.conoha.io.
glocalism.co.jp.        1200    IN      NS      ns-a2.conoha.io.

;; ADDITIONAL SECTION:
ns-a1.conoha.io.        1200    IN      A       157.7.184.31

;; Query time: 9 msec
;; SERVER: 54.65.150.1#53(54.65.150.1)
;; WHEN: Sat Jun 20 08:35:26 JST 2020
;; MSG SIZE  rcvd: 109

これはもっと気持ちわるい。 

$ dig -t a ns-a1.conoha.io @ns1.value-domain.com

; <<>> DiG 9.11.3-1ubuntu1.11-Ubuntu <<>> -t a ns-a1.conoha.io @ns1.value-domain.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59524
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1680
;; QUESTION SECTION:
;ns-a1.conoha.io.               IN      A

;; ANSWER SECTION:
ns-a1.conoha.io.        1200    IN      A       157.7.184.31

;; Query time: 22 msec
;; SERVER: 54.65.150.1#53(54.65.150.1)
;; WHEN: Fri Jun 19 18:38:50 JST 2020
;; MSG SIZE  rcvd: 60

== ??? === 

$ dig -t ns  ns-a1.conoha.io @ns1.value-domain.com

; <<>> DiG 9.11.3-1ubuntu1.11-Ubuntu <<>> -t ns ns-a1.conoha.io @ns1.value-domain.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62356
;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 5
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1680
;; QUESTION SECTION:
;ns-a1.conoha.io.               IN      NS

;; ANSWER SECTION:
ns-a1.conoha.io.        1200    IN      NS      ns2.value-domain.com.
ns-a1.conoha.io.        1200    IN      NS      ns1.value-domain.com.

;; ADDITIONAL SECTION:
ns2.value-domain.com.   1200    IN      AAAA    2406:da14:55b:f2c1:67c2:eaee:3247:5af2
ns1.value-domain.com.   1200    IN      A       54.65.150.1
ns1.value-domain.com.   1200    IN      AAAA    2406:da14:55b:f2a1:fe58:d51e:b42e:476d
ns2.value-domain.com.   1200    IN      A       54.64.110.166

;; Query time: 26 msec
;; SERVER: 54.65.150.1#53(54.65.150.1)
;; WHEN: Fri Jun 19 18:40:14 JST 2020
;; MSG SIZE  rcvd: 184

$ dig -t a qmail.jp @ns1.value-domain.com

; <<>> DiG 9.11.3-1ubuntu1.11-Ubuntu <<>> -t a qmail.jp @ns1.value-domain.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 20508
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1680
;; QUESTION SECTION:
;qmail.jp.                      IN      A

;; Query time: 26 msec
;; SERVER: 54.65.150.1#53(54.65.150.1)
;; WHEN: Fri Jun 19 18:44:15 JST 2020
;; MSG SIZE  rcvd: 37