RE: sporatic, noaa.gov SERVFAIL

2015-01-30 Thread G.W. Haywood
Hi there, On Thu, 29 Jan 2015, Brad Bendily wrote: Any way for me to pinpoint the specific firewall? ping -s packetsize host or traceroute host packetsize ? -- 73, Ged. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsub

Re: sporatic, noaa.gov SERVFAIL

2015-01-29 Thread Mark Andrews
2610:20:8000:8c00::237 > ns-mw.noaa.gov. 86400 IN 2610:20:8800:8c00::237 > ns-nw.noaa.gov. 86400 IN 2610:20:8c00:8c00::2 > > ;; Query time: 18 msec > ;; SERVER: 209.112.123.30#53(209.112.123.30) > ;; WHEN: Thu

RE: sporatic, noaa.gov SERVFAIL

2015-01-29 Thread Brad Bendily
8c00::2 ;; Query time: 18 msec ;; SERVER: 209.112.123.30#53(209.112.123.30) ;; WHEN: Thu Jan 29 16:12:45 CST 2015 ;; MSG SIZE rcvd: 483 ;; connection timed out; no servers could be reached -Original Message- From: Mark Andrews [mailto:ma...@isc.org] Sent: Thursday, January 29, 2015 3:38 PM To

Re: sporatic, noaa.gov SERVFAIL

2015-01-29 Thread Mark Andrews
Ensure your firewall passes fragmented UDP packets. dig +trace +all +dnssec www.nhc.noaa.gov should succeed. You will notice that the responses are large. Mark ; <<>> DiG 9.11.0pre-alpha <<>> +trace +all +dnssec www.nhc.noaa.gov ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- o

sporatic, noaa.gov SERVFAIL

2015-01-29 Thread Brad Bendily
So, for a while we have had issues with resolving www.nhc.noaa.gov. In the past, a full restart of named fixed it for some amount of time. Last week I updated our named to 9.9.6-P1, so I assumed whatever the problem was would be resolved by this update. Apparently not. As you can see from the d