Stéphane Bortzmeyer

With the current git version: ``` % ./plugins/check_multi -f ../test-anchors.cmd Unescaped left brace in regex is deprecated, passed through in regex; marked by

Why using DNScheck?

6

DNScheck is no longer maintained. Why not its successor, [Zonemaster](https://zonemaster.net/)?

False positives on the "Guatemala SOA MNAME" issue

1

In [your paper](https://thehackerblog.com/hacking-guatemalas-dns-spying-on-active-directory-users-by-exploiting-a-tld-misconfiguration/) you claim that this health report could be used to find TLDs with a vulnerability similar to the .gt one. Actually, there are several false positives because...

Limited implementation (no options) of EDNS

2

Create and parse messages with EDNS. It only implements basic EDNS (no options). Example: ``` const edns = dns.EDNS{.bufsize = 568, .do_dnssec = false}; const message = try dns.createEDNSQuery(allocator, "www.afnic.fr",...

[Robustness] Crashes if QTYPE is unknown

9

There are several robustness issues in zig-dns. If a DNS server using zig-dns is exposed to the public Internet, it can crash (or worse) if the incoming packet is badly...

Since the library itself has no dependency (unlike the example executables), it would be nice to add a specific target in `build.zig`, allowing to build without `zig-network`.

Member "toSlice" not found or not visible after argument-dependent lookup

17

I cannot use the library. Even with your own example: ``` var len = "Unicode snowman ☃".toSlice().len(); ``` The compiler complains: ``` % solc --abi registry.sol registry.sol:26:15: Error: Member "toSlice"...

Of course, DNS resolvers are typically indicated by an IP address. Nevertheless, it would be useful to be able to use a domain name for the resolver, not just IP...

Sometimes, the Icinga log files contains spurious messages: [Wed Feb 6 21:29:24 2013]:44145: i/o timeout which are probably generated by the Go runtime (the message returned to the user is...

Today, the plugin gets the list of name servers of the zone from the local resolver. It may breaks in some cases (DNSSEC, invalid nameservers). IWBN if we could have...