xping v1.4.6

[1.4.6] - 2026-09-26

Added

• xping udp HOST PORT — is a UDP service answering? Each probe is
  open (a reply came back), closed (ICMP port unreachable) or no
  response (filtered, or the service ignored the request). The request
  is chosen by port — a DNS root query for 53/5353, SNTP for 123, SNMPv2c
  GET sysDescr (community public) for 161 — or set with --probe /
  --payload HEX. It supports --max-latency, --watch, --until-up
  and alerts, and is a udp type in check files.
• xping blocklist IP|DOMAIN — checks spam blocklists (DNSBL).
  • An IP is checked on Spamhaus ZEN, SpamCop, Barracuda, PSBL,
    Mailspike, UCEPROTECT L1, DroneBL and s5h.
  • A domain is checked on Spamhaus DBL, SURBL and URIBL, and the IPv4
    addresses of its MX and A hosts are checked on the IP lists.
  • Results are listed, policy (Spamhaus PBL end-user ranges, which
    don't fail), clean, refused (lists that refuse public resolvers)
    or error.
  • --zone adds more lists. It is a blocklist type in check files and
    exits 1 when the target is listed.
• DNSSEC in xping dnscheck.
  • Three queries to a validating resolver (1.1.1.1, then 8.8.8.8) with
    the DO flag: DS at the parent, a signed SOA and its AD flag, and a
    checking-disabled retry after SERVFAIL.
  • Results: signed and validated (ok); broken "bogus" signatures,
    meaning validating resolvers cannot resolve the domain (fail); signed
    without DS, i.e. not active (warn); not signed (info).
  • Answers are retried over TCP when truncated.
• xping lookup --doh PROVIDER — DNS over HTTPS (RFC 8484 wire
  format) to cloudflare, google, quad9 or any https:// URL.
  It gets past resolvers that filter, rewrite or hijack plain DNS. JSON
  output now includes transport (dig, udp or doh) and resolver.
• Personal defaults in ~/.xping/config.toml.
  • A [defaults] section applies to every command, and there is one
    section per command (e.g. [ping] count = 10,
    [lookup] doh = "cloudflare"). Keys are long option names.
  • The command line always wins. In mutually exclusive pairs, the flag
    given on the command line drops the file's value for the other one
    (-6 beats ipv4 = true).
  • Unknown sections, options or values are errors that name the file,
    section and key.
  • xping config shows the active settings or explains what is wrong,
    and xping config --example prints a starter file.
  • XPING_CONFIG selects another file, and XPING_CONFIG=none ignores
    it.
  • The xping HOST shorthand uses the [ping] section.
• xping ntp [SERVER] — the system clock offset against an NTP
  server (default pool.ntp.org) over SNTP. It shows the offset, the
  delay, the stratum, the reference and whether the server is
  synchronised, using the lowest-delay of several samples.
  --max-offset MS makes it an alarm. It is an ntp type (threshold
  max_offset) in check files.