----- Original Message ----- 
From: "Jim Reid" <j...@rfc1035.com>
To: "George Barwood" <george.barw...@blueyonder.co.uk>
Cc: <dnsop@ietf.org>
Sent: Wednesday, March 17, 2010 12:23 PM
Subject: Re: [DNSOP] m.root-servers.net DNSSEC TCP failures


> On 17 Mar 2010, at 11:28, George Barwood wrote:
> 
>> It seems that  m.root-servers.net is now serving DNSSEC, but does  
>> not have TCP, so the following queries all fail
> 
> Well these queries work just fine for me. Perhaps your problems are  
> caused by local misconfiguration such as a broken CPE/middleware box  
> or DNS proxy?

I don't think it is very local, as all the other root servers work fine.
I reproduced the problem at 3 different sites, all within the UK.

The error message from dig is

;; communications error to 202.12.27.33#53: network unreachable

and this comes up immediately.

Ping shows high packet loss ( > 50% ) , and an average round trip time of 600 
msec.

But DNS/UDP works fine, with a response time of 30 msec.

I guess there are some network problems with TCP.



_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to