----- Original Message ----- From: "Jim Reid" <j...@rfc1035.com> To: "George Barwood" <george.barw...@blueyonder.co.uk> Cc: <dnsop@ietf.org> Sent: Wednesday, March 17, 2010 12:23 PM Subject: Re: [DNSOP] m.root-servers.net DNSSEC TCP failures
> On 17 Mar 2010, at 11:28, George Barwood wrote: > >> It seems that m.root-servers.net is now serving DNSSEC, but does >> not have TCP, so the following queries all fail > > Well these queries work just fine for me. Perhaps your problems are > caused by local misconfiguration such as a broken CPE/middleware box > or DNS proxy? I don't think it is very local, as all the other root servers work fine. I reproduced the problem at 3 different sites, all within the UK. The error message from dig is ;; communications error to 202.12.27.33#53: network unreachable and this comes up immediately. Ping shows high packet loss ( > 50% ) , and an average round trip time of 600 msec. But DNS/UDP works fine, with a response time of 30 msec. I guess there are some network problems with TCP. _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
