What's New

SPF checking HELO/EHLO host names

Friday, 16 October 2009

It has come to our attention that more e-mail servers are now performing SPF checks on the SMTP session HELO/EHLO greeting host name (in addition to checking the domain name part of the sender's e-mail address). Therefore always make sure that your e-mail server is configured to use a correct hos...


Simple DNS Plus logs in W3C Extended format

Monday, 04 May 2009

A new command line tool which converts Simple DNS Plus raw request log files (.sdraw files) into the standard W3C Extended log file format (as typically produced by IIS, Apache, and other web-servers) is now available. Note that DNS request (and the .sdraw log files) do not contain HTTP header in...


Secure zone transfers in Simple DNS Plus v. 5.2

Tuesday, 17 March 2009

The upcoming Simple DNS Plus v. 5.2 supports secure zone transfer (TSIG authenticated). Both zone transfer requests and responses are authenticated, so this provides protection in two ways; it prevents unauthorized transfers (only people / servers with the correct key can transfer), and it ensure...


Remote manage Simple DNS Plus

Sunday, 15 February 2009

The upcoming Simple DNS Plus v. 5.2 supports remote management, so that you can use the normal Simple DNS Plus user interface on a remote computer. This is much faster and uses much less bandwidth compared to accessing a remote server via Remote Desktop, VNC, or similar. Traffic between the serve...


DNSSEC signed .gov

Thursday, 05 February 2009

Today the .gov top level domain (U.S. government) was DNSSEC signed. As per OMB Memo 08-23 , all U.S. government agencies must DNSSEC sign their DNS zones (ending with .gov) before the end of 2009. Federal agencies using Simple DNS Plus will be able to DNSSEC sign their zones in the upcoming Simp...


Option in Simple DNS Plus to ignore root requests

Saturday, 31 January 2009

Because of continued reports about DNS amplification / DDoS attacks (DNS requests for NS-records for <root> from spoofed IP addresses), we have added a new option in Simple DNS Plus to make it easy to deal with these requests and keep them out of the log. In the Simple DNS Plus Options dialog / D...


DNSSEC in Simple DNS Plus v. 5.2

Sunday, 25 January 2009

The upcoming Simple DNS Plus v. 5.2 supports hosting DNSSEC signed zones and has built-in functions for managing DNSSEC keys and for signing zones - all in a user friendly GUI of course. What is DNSSEC? Similar to digital signatures for e-mails, DNSSEC authenticates that a set of DNS records orig...


Root query DNS amplification / DDoS attack

Tuesday, 20 January 2009

Added January 31th 2009: We have just added a new option in Simple DNS Plus to ignore root requests (and not log them) - click here for details . Hopefully this will make it easier to deal with this attack. Added January 30th 2009: We do NOT recommend blocking the sender's IP address on your fire...


Connect