simple way to fix Verisign DNS issues

Ok, so the Verisign issue seems to impact a number of
various things.

1. RBL's
2. Testing scripts
3. MX and mail handling
4. Taking eyeballs and possible revenue away from others

I think the solution is quite simple.

Each provider that is unhappy with this should stand up
a ANYCAST server that answers on this IP.

Use Zebra to inject AS 30060 into your network and
have it goto a machine that simply answer NXDOMAIN.

Have that DNS server(s) answer the same way "it should"
or "the way you want"

Make sure you tag the route with NO-EXPORT :slight_smile:

If you are a hosting company, you could redirect them
to your "Buy Domains Now" page. Verisign is HELPING YOU
get more customers. All you need is a few stewpid router
tricks and poof you are set.

I've stood up two anycast servers today and its working
nicely. The DNS server just answers like it should.

Heck you could have this server also become a AS112
box for your network as well. Kill two birds with one
,er two zebras


Date: Tue, 16 Sep 2003 12:05:04 -0600
From: John Brown

Make sure you tag the route with NO-EXPORT :slight_smile:

Are you sure about this? :wink: