JH Software News

Simple DNS Plus v. 5.2 build 122 released

Tue, 14 May 2013 20:51:00 GMT

Simple DNS Plus v. 5.2 build 122 is now available at http://www.simpledns.com/download.aspx.

This release includes the following updates and fixes:

Update: New option to input TXT-record data as either "One continous string" or "Individual strings". This makes it easier to enter long (+255 characters) strings - for example for DomainKeys.
Update: DHCP server plug-in - Reservations list - added "Options" and "Supply host name" columns, made columns sortable (click header), and made window resizable.
Update: Options dialog / General section: changed text "Domain name of this DNS server" to "Host name of this DNS server (FQDN)"
Fixed: When serving records from a local DNSSEC signed zone where the answer begins with a CNAME-record, signature records (RRSIG) were not included for all but the initial CNAME-record.
Fixed: DNS Records window - Reverse zone - "Edit IP-to-Name Mappings" button also shown with IPv6 reverse zones. The button was not working and was not supposed to be there in this version. Button removed for now. May add this function for IPv6 in future version.

Plesk Panel adds support for Simple DNS Plus

Wed, 27 Feb 2013 22:13:00 GMT

Parallels has just released Plesk Panel v. 11.0.9 MU# 39 which adds support for Simple DNS Plus.

For more information about setting up Plesk with Simple DNS Plus see http://kb.parallels.com/115611.

Parallels Plesk Panel is one of the most widely used hosting control panel solution. For details see http://www.parallels.com/products/plesk/.

Simple DNS Plus v. 5.2 build 121 released

Sat, 21 Jul 2012 21:49:00 GMT

Simple DNS Plus v. 5.2 build 121 is now available at http://www.simpledns.com/download.aspx.

The update fixes a bug where specifically malformed DNS requests might crash Simple DNS Plus when using certain non-default settings.

Our new office

Fri, 20 Apr 2012 08:34:00 GMT

Just moved into a great new office in the “Kattegat Silo” office building (www.kattegatsilo.dk).
The building used to be a grain storage silo, which was converted into a super modern office building in 2005.

Our new address is:

JH Software ApS
Silovej 8, 2. etage
9900 Frederikshavn

Simple Failover v. 2 screen shots

Thu, 29 Mar 2012 15:01:27 GMT

After a taking a break to work on other projects we have resumed work on Simple Failover v. 2.
We expect to start beta testing within the next few months.

Check out the updated “New in Simple Failover v. 2” page - now also with screen shots - at http://www.simplefailover.com/kb.aspx?kbid=1298

Simple DNS Plus v. 5.2 build 120 released

Mon, 17 Oct 2011 10:26:00 GMT

Simple DNS Plus v. 5.2 build 120 is now available at http://www.simpledns.com/download.aspx.

The update fixes a bug where a zone's DNSSEC signatures would not be re-loaded after some types of API updates / on secondary servers after receiving zone transfer.

Simple DNS Plus v. 5.2 build 119 released

Sat, 06 Aug 2011 11:17:00 GMT

Simple DNS Plus v. 5.2 build 119 is now available at http://www.simpledns.com/download.aspx

This update consists of the following 3 enhancements:

1) New "Also Notify" feature.
Send NOTIFY requests to IP addresses not listed in NS-records when primary zone is updated.
This can be specified in the Zone Properties dialog under a new "Notify" tab:

And the default for new zones can be specified in the Default Zone Values dialog under a new "Notify" tab:

2) The DHCP Server plug-in now supports "infinite" lease period.

3) For Shadow forwarding, you can now specify the value of response AA-flag.
Either set, copy (from forward server response), or clear:

This is NOT a critical update, and you only need to update if you want / need the updates included.

New "TFTP Server" plug-in

Fri, 18 Feb 2011 22:43:19 GMT

This new plug-in provides TFTP (Trivial File Transfer Protocol) server functionality.

TFTP is typically used in combination with DHCP to enable PXE / diskless booting of PCs, provisioning IP phones, etc.
An example of how to use this is provided in KB1304 - How to serve a network based Debian Linux installation with Simple DNS Plus.

Download: tftp-plugin.zip (14 KB)

Un-zip the file to the "plug-ins" sub-directory under the directory where Simple DNS Plus is installed. After this it will be available in the Simple DNS Plus Options dialog / Plug-Ins section.

This plug-in is free of charge and can be used with Simple DNS Plus v. 5.2 build 111 and later - any license size.

For more information about this plug-in see KB1302

Simple DNS Plus v. 5.2 build 118 released / Enhanced DHCP Server plug-in

Fri, 18 Feb 2011 22:33:16 GMT

Simple DNS Plus v. 5.2 build 118 is now available at http://www.simpledns.com/download.aspx.

This update includes an enhanced version of the DHCP Server plug-in - with the following new features:

Added DHCP options "TFTP Server" (a.k.a. "Next-Server") and "Boot file name".
These options are typically used in combination with a TFTP server to enable PXE / disk less booting of PCs, provisioning IP phones, etc.
(we also just release a new TFTP server plug-in)
An example of how to use this is provided in KB1304 - How to serve a network based Debian Linux installation with Simple DNS Plus.
Ability to override most options (lease time, default gateway, static routes, DNS servers, TFTP server, boot file) per reservation / reservation group.
Ability to provide at host name to clients with MAC based reservation.
Ability to limit DHCP clients to reservations (ignore DHCP requests from clients with no reservation).

See the updated DHCP Server plug-in user interface and documentation at http://www.simpledns.com/kb.aspx?kbid=1216

The update also include a bug fix - for details on this and previous releases,please see release notes.

This is NOT a critical update, and you only need to update if you need to fixes / updates included.

Updated DHCP Server plug-in released

Sun, 19 Dec 2010 18:39:39 GMT

We have added an option to supply static routes (in addition to the default gateway) to DHCP clients. In technical terms, the plug-in now supports DHCP parameter 121 / 249.

It it now also possible to not assign Simple DNS Plus as the preferred DNS server (by disabling the first option highlighted below), and to re-order DNS server IP addresses according to preference (using the Up/Down buttons highlighted below):

This updated plug-in works with Simple DNS Plus v. 5.2 (any build) and can be downloaded from http://www.simpledns.com/outbox/plugins/v52/dhcp-5-2-118.zip

To install, shutdown Simple DNS Plus, unzip above file to the Plugins folder under the directory where Simple DNS Plus is installed (replacing the older version of the plug-in .dll), and start Simple DNS Plus again.

This updated plug-in will also be included with future builds of Simple DNS Plus v. 5.2 (build 118+).

Atom Publishing Protocol (AtomPub) server library for ASP.NET

Tue, 31 Aug 2010 21:50:21 GMT

Just released - for details click here

New reports of DNS amplification / DDoS attacks

Tue, 10 Aug 2010 16:56:00 GMT

Over the past few days, a number of Simple DNS Plus users have reported that they are receiving a lot of incoming DNS requests for <root> and/or various unknown domain names - typically originating from a limited number of IP addresses. We have also noticed reports of this with other DNS servers on various forums etc.

If you see something similar, this may be an indication that someone is abusing your DNS server as part of a so-called DNS amplification attack against a third party - the owner of the IP address that the DNS requests appear to originate from.
By sending a DNS request from a spoofed IP address, the attacker attempts to trick your DNS server into sending a DNS response packet to the victim and thereby become part of a DDoS attack. Typically the request is designed to trigger a response packet which is larger than the original request packet - thus the amplification.

We do NOT recommend blocking the sender's IP address on your firewall, with IPSec, or anything else at the IP address level - that is exactly what the attacker wants you to do! By blocking the apparent sender IP addresses, you are really blocking the victim rather than the attacker - because the sender IP address is spoofed as the victim's.
The aim of the attack is twofold: (1) overload the victim's Internet connection with large DNS responses, and (2) make everybody firewall the victim, so he can't use his connection even after the attack.

The best way to counter this type of attack is to make your DNS server unattractive as a "way-point". You do this by configuring Simple DNS Plus to either ignore or refuse lame requests.

First, in the Options dialog / DNS / Resolver / Recursion section, either turn off recursion completely if you don't need it, or limit it to your own IP address range(s):

Then, in the Lame Requests section, select either "Respond with a Refused error message" or "Do not respond":

Generally we recommend using the "Refused" option as this makes it easier to troubleshoot other DNS issues. However if this attack is continuously hitting your server, you will do the victim a favor using the "Do not respond" option. When no longer under attack, you can switch to the "Refused" option which still ensures that your server is not attractive as a way-point for this type of attack - since it won't amplify traffic.

If the requests are mostly for <root>, another way to deal with this traffic, and keep it out of the log at the same time, is the "Ignore all DNS requests for <root>" feature found in the Miscellaneous section:

Simple Failover v. 2.0

Sat, 31 Jul 2010 15:20:00 GMT

We are working on the next major version of Simple Failover, and we would like to hear your feedback on the planned new features. There is also still time for adding more new features if you have a good idea.

See the list of new features at http://www.simplefailover.com/kb.aspx?kbid=1298

Simple Failover is a software product which continuously monitors your servers (any networked device/service) to see which are up and which are down, and then dynamically updates your DNS records accordingly so that your domain name always points to a functional server. Additionally it can notify you of any encountered problems.

This upcoming v. 2.0 will of course be covered by our one year free upgrade protection. If you purchase a license for the current Simple Failover version today, you will receive a free upgrade to v. 2.0 when this is released.

Please e-mail us your thoughts and ideas, or post below, or in the all new community forums
We look forward to hearing from you.

Simple DNS Plus v. 5.2 build 117 released / Problem resolving WebMD.com

Fri, 09 Jul 2010 14:12:00 GMT

Simple DNS Plus v. 5.2 build 117 is now available at http://www.simpledns.com/download.aspx
For more details on the updates and changes in this build, please see release notes.

Over the last few days, several users have reported not being able to resolve www.webmd.com.
The problem is an erroneous response (details below) from the DNS servers hosting the domain name.
We have contacted WebMD.com and their DNS provider (UltraDNS) about this and anticipate that they will fix the problem shortly.
However since WebMD.com is a very popular web-site (and UltraDNS is one of the larger DNS providers), we felt it was best to provide a quick workaround with above update to Simple DNS Plus.

When we do a lookup for www.webmd.com against one of the authoritative DNS servers (for example "pdns1.ultradns.net"), we get a response with a CNAME-record (alias) pointing to www.phx1.webmd.com and a SOA-record in the authority section:

The standard (RFC) interpretation of this SOA-record is that no records exist for the current name (www.phx1.webmd.com) and the requested record type (A) - a so called "NO DATA" response.
Therefore previous builds of Simple DNS Plus naturally stopped the resolving process here - no need to do anything more since we know the final answer (no data).

However if we do another DNS lookup for www.phx1.webmd.com against the same DNS server, we get a surprising response - now all of a sudden there IS an A-record for this name:

This is an error in the configuration or operation of the DNS servers hosting www.webmd.com, and we obviously recommend that they get this fixed as quickly as possible.

In this new build of Simple DNS Plus, we have made an exception for this very specific situation:
For responses received containing a CNAME-record in the Answer section, a "NODATA" SOA-record in Authority section is now ignored, and the CNAME alias is attempted resolved in a new outbound request.
This immediately makes it possible for Simple DNS Plus to resolve www.webmd.com and any other domain with the same problem.
The trade off is that this will also cause a few more outbound requests in certain situations. These extra requests would normally not be necessary, but it does make Simple DNS Plus more resilient against this type of problem.

Expiration of support for Simple DNS Plus v. 4.00

Thu, 17 Dec 2009 13:16:00 GMT

Note that from January 17th 2010 we will no longer provide support for Simple DNS Plus v. 4.00 (or earlier versions).

As per our Support Life-Cycle Policy, a Simple DNS Plus version is supported for 3 years after it is first released, and for 2 years after we stop selling it (whichever comes last).
V. 4.00 was originally released on April 10th 2005, and we stopped selling it on January 17th 2008 when v. 5.0 was released.

We encourage users of v. 4.00 and earlier version to upgrade to the current v. 5.2.
For details on all the new features and other improvements see:
v. 5.0: http://www.simpledns.com/kb.aspx?kbid=1215
v. 5.1: http://www.simpledns.com/kb.aspx?kbid=1246
v .5.2: http://www.simpledns.com/kb.aspx?kbid=1265

Simple DNS Plus v. 5.2 build 116 / v. 5.1 build 138 released

Thu, 10 Dec 2009 23:57:00 GMT

Simple DNS Plus v. 5.2 build 116 is now available at http://www.simpledns.com/download.aspx
For details on the updates and changes in this build, please see release notes.

Simple DNS Plus v. 5.1 build 138 is now available at http://www.simpledns.com/download-oldver.aspx
For details on the updates and changes in this build, please see release notes.

These are NOT a critical updates. We do recommend that all users update to these builds, but there is no urgency unless you are directly affected by the issues addressed by the updates.

Update to the Simple DNS Plus API for .NET and COM

Fri, 30 Oct 2009 17:39:00 GMT

We have just released version 1.1 build 4 of the Simple DNS Plus API for .NET and COM.

Updates in this build:

Update: Uses Simple DNS Plus v. 5.2 code base (various optimizations and bug fixes).
Update: Setting Zone.DefaultTTL value now updates TTL value of all records which had the old default TTL value.
Update: Record TTL values now automatically synchronized in RRSet (records with same name / type) when adding new records.
Fixed: Setting DNSZone.AllowZoneTransfer property was not always saved correctly.

Version 1.1 build 4 is now available for download:
sdnsapi-setup.exe (720 KB)

If you have a previous version/build installed, simply run above installation file to upgrade.

For more information about the Simple DNS Plus API for .NET and COM, see the on-line documentation at http://www.simpledns.com/help/api/

Freeware DNS Client Library for .NET

Thu, 29 Oct 2009 11:55:00 GMT

We have just released "JH Software's DNS Client Library for .NET".

This can be used to perform simple as well as advanced DNS lookups from any .NET code (.NET v. 2.0 or later).

For details and download see http://www.simpledns.com/dns-client-lib.aspx

SPF checking HELO/EHLO host names

Fri, 16 Oct 2009 12:30:00 GMT

It has come to our attention that more e-mail servers are now performing SPF checks on the SMTP session HELO/EHLO greeting host name (in addition to checking the domain name part of the sender's e-mail address).

Therefore always make sure that your e-mail server is configured to use a correct host name (like "mail.example.com") in the HELO/EHLO greeting, and that an A- and/or AAAA-record exists for this host name in DNS.

Also, when using the "Automatic SPF" feature in Simple DNS Plus, make sure that the automatic SPF-record data is also valid for the HELO/EHLO host name, or define a specific SPF-record for the HELO/EHLO name in the zone where this belongs (this will override the automatic SPF record).

Note that the default automatic SPF record data "v=spf1 mx -all" will fail such a test if no MX-record exists for your HELO/EHLO name.
For example, if your domain name is "example.com" and your mail server is named "mail.example.com" (and uses this in HELO/EHLO greetings), you would probably only have an MX-record for "example.com" - not for "mail.example.com", and therefore "v=spf1 mx -all" fails to validate "mail.example.com".
Instead you could use "v=spf1 ip4:1.2.3.4 -all" (where 1.2.3.4 is the IP address of your mail server), which would work for both types of tests.

For more information about SPF in Simple DNS Plus, see KB1148.

New "Clone Response" plug-in

Thu, 20 Aug 2009 14:06:00 GMT

This new plug-in provides DNS responses by cloning the DNS records from responses to requests for another specified domain name.
This is an easy way to host many domain names that have the exact same records (except for their zone names).

For more details see KB1289.

Download cloneresponse-plugin.zip (9 KB) and un-zip it to the "plugins" sub-directory under the directory where Simple DNS Plus is installed. After this the plug-in will be available in the Simple DNS Plus Options dialog / Plug-Ins section.

Note that this plug-in requires an "unlimted zones" license and works with Simple DNS Plus v. 5.2 build 111 and later only.

New "TCP Port Forwarder" plug-in

Tue, 18 Aug 2009 11:47:00 GMT

This new plug-in provides simple TCP port forwarding.

If the Simple DNS Plus computer is connected to both the Internet and to a private network (LAN), this can be used to forward connections from the Internet to a computer on the LAN. For example mapping remote desktop connections (port 3389).

For more details see KB1288.

Download tcpforward-plugin.zip (18 KB) and un-zip it to the "plugins" sub-directory under the directory where Simple DNS Plus is installed. After this the plug-in will be available in the Simple DNS Plus Options dialog / Plug-Ins section.

Note that this plug-in works with Simple DNS Plus v. 5.2 and later only.

ns2service.net now supports secure zone transfers

Wed, 22 Jul 2009 11:56:00 GMT

Our secondary DNS service at www.ns2service.net now supports secure zone transfer (TSIG authenticated).

Both zone transfer requests and responses are authenticated, so this provides protection in two ways; it prevents unauthorized transfers (only people / servers with the correct key can transfer), and it ensures data integrity on the secondary servers (not possible to spoof / inject false data during transfers).

You can enable TSIG when adding or editing a domain name in the ns2service.net web interface.

For details on enabling/requiring TSIG signed zone transfers on your primary Simple DNS Plus server see http://www.simpledns.com/newsitem.aspx?id=2387

Updated "Remote DNS Look Up" function

Sun, 05 Jul 2009 15:18:00 GMT

Our on-line Remote DNS Look Up function has been updated to much closer match the features of the GUI based DNS Look Up tool that comes with Simple DNS Plus.

It now supports a long list of additional record types, it supports EDNS0 options including payload size and DNSSEC, and it supports displaying native characters in IDNs in the repose output.

The output is formatted the same way as in the GUI tool - in fact the on-line and GUI tools now shared much of their program code (both .NET based).

And finally the on-line function is now AJAX based for a smoother experience.

New DNS server IP addresses for ns2service.net

Fri, 03 Jul 2009 15:11:00 GMT

We are moving our ns2service.net DNS servers to new IP addresses:

ns.ns2service.net = 77.68.170.98
ns2.ns2service.net = 77.68.170.99

For ns2service.net users - If your primary DNS server is restricting zone transfer access by IP address, please update your configuration to include the IP addresses above.

You do NOT need to update your domain name registrations as our DNS server names are not changing.

GeoDNS plug-in for Simple DNS Plus

Mon, 22 Jun 2009 08:30:00 GMT

This new plug-in provides a different DNS response depending on what country a DNS request originates from. This can be used to direct Internet traffic (web, FTP, streaming media, etc.) to a server geographically closer to the end-user, or with contents specific for a geographical area.

This is exactly the same that large web-sites such as Google.com and CNN.com do, and what companies like Akamai charge a lot of money to provide.
Now this functionality is available as a free plug-in for Simple DNS Plus.

For more details see KB1284.

Download geodns-plugin.zip (31 KB) and un-zip it to the "plugins" sub-directory under the directory where Simple DNS Plus is installed. After this the plug-in will be available in the Simple DNS Plus Options dialog / Plug-Ins section.

Note that this plug-in works with Simple DNS Plus v. 5.2 and later only.