Home ~ Locutus ~ Projects ~ Chat ~ IPv6 ~ Looking Glass ~ DNS Pollution ~ VPS ~ Downloads ~ Wallpapers ~ Links ~ Contact

The script calculates the dns spam value of a hostname:

If the value is between 0 and 49, the hostname is almost certainly a hierarchical host.
If between 50 and 99, the hostname is possibly dnsspam. And if the score is 100 or more, the host is certainly dnsspam.

How does it determine what is spam or not? The algorithm of the spamcalc script is explained here.

Uses Spamcalc-0.7.0 by Joost 'Garion' Vunderink.

 

What is dnsspam, and why is it bad?:

An important problem solved with IPv6 is the enormous amount of new IP numbers that can be given out. To this extent, even the smallest node on the internet (a cable modem/dialup) gets a staggering amount of IPs. Normally, somewhere in the range of 2^64 to 2^80 addresses.

With this new address space, people are more easily delegated address space resolving via a reversed DNS zone. The main problem we face is that inexperience and ignorance leads people to pollute their DNS zones.

A hostname on the internet is of the form hostname.domain.tld. Perhaps, if you are a delegation within the 'domain.tld' domain, you will receive a subdomain, which makes your hostname hostname.subdomain.domain.tld. This addressing scheme, which is documented in RFC1178, was devised to organize DNS as a logical hierarchy.

Having hostnames like 'I.am.the.king.of.the.internet.domain.tld' or any other form of sentence / phrase are without any doubt in disagreement with the hierarchical definition of the global naming system (DNS).

One of the biggest problems with this DNS pollution in general is the fact that the IP's for these 'vhosts' could have been used for a company providing dialup services, SSL webservers and other useful reasons instead of a 'nice vhost on irc'.

As a general rule of thumb; a hostname belongs to an interface on a machine. This interface should get a hierarchical name, named after the machine or a name describing the interface. Eg. 'locutus.example.org'. This box is called sauron and is in the example.org domain. 'sauron-adsl.example.org' which is sauron's ADSL interface. 'locutus.wlan.example.net' could then for instance be a laptop using the wireless LAN network of example.net.

Hostnames that consist of phrases, bogus domains, bad language or in other forms undesirable textual data, are considered to be DNS pollution and this form of behaviour will be acted upon on several IRC channels.

Data here has been compiled from various sites and most part is made by Joost "Garion" Vunderink.
No copyright infringement intended.