Human Errors as a Cause of DNS Failure

[phn at icke-reklam.ipsec.nu]

Cricket Liu <cricket at menandmice.com> wrote:

>> Does anyone have available a compendium of typical human errors that cause
>> DNS failures? Operational procedure recommendations to help avoid these
>> errors would be appreciated as well.
>>
>> I would be interested in concrete data regarding how typical these
> failures
>> are and what the costs of these failures are to those experiencing them.

> The results of our latest survey of 5000 subdomains of com is now online
> at http://www.menandmice.com/6000/61_recent_survey.html.  You might
> find that interesting:  It gives statistics on common misconfigurations.

How come that a group of admins for an area is so cluless and does
such a bad job ad dns admins seems to do. What other group of
professionals can get away with a 71.1% error rate ?? ( I certenly 
don't address the population reading and participating in this group,
in my opinion close to everyone who ever posted here has a better 
ability to manage dns then the "random dns-admin" observed in the study.)
I do address the countless junkies that is spreading all this junk
( and filling my logs with "Lame delagations"). 

Education is avaliable, cricket and others runs very good ones. Why
don't the knowledge spread out ? Are the general admin simply a
"point-and-click"-luser that happens to find a dark corner in the server hall ?


It's true that DNS has an amazingly stable design where redundancy
and retransmissions will cover up many problems. But why is simple
examinations of dns-servers sanity not done until a service breaks as
the last chain breaks ?



(Sorry could not resist. RIPE has some figures of simular type :
"http://www.ripe.net/ripencc/pub-services/stats/revdns/zcheck/ranking16.html")



> cricket

> Men & Mice
> DNS Software, Training and Consulting
> www.menandmice.com

> The DNS and BIND Cookbook, coming October 2002!
> http://www.oreilly.com/catalog/dnsbindckbk/



-- 
Peter Håkanson         
        IPSec  Sverige      ( At Gothenburg Riverside )
           Sorry about my e-mail address, but i'm trying to keep spam out,
	   remove "icke-reklam" if you feel for mailing me. Thanx.