you are trying to run a commercial service on a residential ISP product. In short, you can't fix this without getting a commercial account that does no filtering.<br><br>Many (most?) residential lines are port filtered heavily to block all sorts of nasty. A residential customer running a rogue DNS server is viewed as a security problem (and they usually are).<br>
<br><div class="gmail_quote">On Thu, May 10, 2012 at 10:27 AM, William Bagwell <span dir="ltr"><<a href="mailto:rb211@tds.net" target="_blank">rb211@tds.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
On Wednesday 09 May 2012, John Heim wrote:<br>
(snips)<br>
> <a href="http://dns.measurement-factory.com/cgi-bin/openresolvercheck.pl" target="_blank">http://dns.measurement-factory.com/cgi-bin/openresolvercheck.pl</a> says<br>
> I'm running an open resolver.<br>
<br>
Have a similar problem to John, likely for a very different reason. I am<br>
trying to pass a PCI (Credit card merchant) compliance scan of my home<br>
computer and failing on *one* single point. They say I'm running a DNS<br>
server that is allowing "DNS Cache Probing". I'm not, my port 53 is<br>
closed, and I have even turned off the internal DNS cache built into my<br>
fire wall in an attempt to pass.<br>
<br>
It apeares from the link John posted that my ISP may be intercepting these<br>
external DNS queries since it is they who are answering.<br>
<br>
"184.60.162.220 [64.50.228.54] open 2012-05-10 14:02:28"<br>
>From the notes,<br>
"If a resolver receives and transmits on different addresses, the<br>
transmitting address is shown in [brackets]."<br>
<br>
If so, I have no control over 64.50.228.54 and its open status or allowing<br>
cache probing. Any help on passing this compliance test<br>
would be appreciated.<br>
<span class="HOEnZb"><font color="#888888">--<br>
William<br>
<br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
</font></span></blockquote></div><br><br clear="all"><br>-- <br>-- <br>James P. Kinney III<br><br>As long as the general population is passive, apathetic, diverted to
consumerism or hatred of the vulnerable, then the powerful can do as
they please, and those who survive will be left to contemplate the
outcome.<br>- <i><i><i><i>2011 Noam Chomsky<br><br><a href="http://heretothereideas.blogspot.com/" target="_blank">http://heretothereideas.blogspot.com/</a><br></i></i></i></i><br>