[dns-operations] A survey of the actual use of DNS options?

2013-06-16 Thread Stephane Bortzmeyer
Does anyone know of a survey of the actual use of EDNS options, as seen by authoritative name servers? A quick glance at the traffic of .FR name servers seem to indicate that they are almost never used (a few 3, NSID and a few 5, DAU, even if the RFC on DNSSEC signaling of algorithms is not yet pub

Re: [dns-operations] A survey of the actual use of DNS options?

2013-06-17 Thread Stephane Bortzmeyer
On Sun, Jun 16, 2013 at 05:29:40PM -0700, Colm MacCárthaigh wrote a message of 62 lines which said: > At this point, several providers are using EDNS client > subnet. That's probably the most common option, by several orders of > magnitude. I don't see option 8 at all in my data. But I had on

Re: [dns-operations] A survey of the actual use of DNS options?

2013-06-17 Thread Stephane Bortzmeyer
On Sun, Jun 16, 2013 at 10:43:05PM +0200, Stephane Bortzmeyer wrote a message of 13 lines which said: > .FR name servers seem to indicate that they are almost never used (a > few 3, NSID and a few 5, DAU, even if the RFC on DNSSEC signaling of > algorithms is not yet published).

Re: [dns-operations] old (historical) zone files ?

2013-06-18 Thread Stephane Bortzmeyer
On Tue, Jun 18, 2013 at 11:03:30PM +0200, Marjorie wrote a message of 30 lines which said: > Basically I am researching early Internet usage and I would be > interested in (very) old zone files (or plain domain lists) from > around between 1985 and 1990, This is really old. You may have more

Re: [dns-operations] Clear DNS cache

2013-06-20 Thread Stephane Bortzmeyer
On Thu, Jun 20, 2013 at 09:57:07AM +, Franck Martin wrote a message of 7 lines which said: > the dot com DNS got corrupted for several domains, you may have > still wrong entries lingering in your DNS cache. This may affect > sending/receiving emails. Please check your logs, and clear your

Re: [dns-operations] Clear DNS cache

2013-06-20 Thread Stephane Bortzmeyer
On Thu, Jun 20, 2013 at 01:10:01PM +0200, abang wrote a message of 9 lines which said: > "..It seems your nameservers don't agree on the SOA serial number!... " But they seem to agree on the content. I assume that Dynect does not enable AXFR with the customer's own name servers so they have t

Re: [dns-operations] Clear DNS cache

2013-06-20 Thread Stephane Bortzmeyer
On Thu, Jun 20, 2013 at 07:52:36AM -0400, Andrew Sullivan wrote a message of 23 lines which said: > Without saying anything on the case at hand, I can tell you with > great certainty that Dyn will cheerfully act as slave for a zone. Point taken. But the problem could be in the other direction

Re: [dns-operations] .biz DNSSEC failure?

2013-06-24 Thread Stephane Bortzmeyer
On Sat, Jun 22, 2013 at 02:46:56PM -0400, staticsafe wrote a message of 33 lines which said: > http://dnsviz.net/d/nic.biz/dnssec/ A personal opinion: when posting DNSviz URLs, always attach a screen shot of the *current* state. When I've read your message, it was too late, .biz was fixed. __

Re: [dns-operations] weird DNS problem

2013-06-27 Thread Stephane Bortzmeyer
On Wed, Jun 26, 2013 at 11:15:32PM -0500, alex flores wrote a message of 58 lines which said: > One more weird thing is that just as the problem appeared, just > dissapeared from the dns affected and it start to work correctly, > but now we received the report from another dns So it looks

Re: [dns-operations] A problem with many ccTLD in Africa

2024-11-10 Thread Stephane Bortzmeyer via dns-operations
--- Begin Message --- On Fri, Nov 08, 2024 at 08:31:12PM +, Stephane Bortzmeyer via dns-operations wrote a message of 77 lines which said: > Several ccTLD in Africa have a secondary at Afrinic, an anycasted > server. One of the instances of this server no longer refreshes the > c

Re: [dns-operations] Microsoft DNS DNSSEC issues

2024-11-13 Thread Stephane Bortzmeyer via dns-operations
--- Begin Message --- On Tue, Nov 12, 2024 at 04:53:06PM -0600, Chad Dailey wrote a message of 288 lines which said: > Thank you for your analysis, much appreciated. I've got more homework to > do, to determine why breakage started, apparently spontaneously. We > performed no service changes

[dns-operations] A problem with many ccTLD in Africa

2024-11-08 Thread Stephane Bortzmeyer via dns-operations
--- Begin Message --- Several ccTLD in Africa have a secondary at Afrinic, an anycasted server. One of the instances of this server no longer refreshes the content of the zone files, for at least a week. You can see that, for instance, in .mz, testing with RIPE Atlas probes, we see one instance st

Re: [dns-operations] How do you manage multiple domains under a ccTLD?

2024-11-07 Thread Stephane Bortzmeyer via dns-operations
--- Begin Message --- On Fri, Nov 01, 2024 at 10:16:42AM +, me aharen wrote a message of 110 lines which said: > I am interested to learn how ccTLD operators handle zone file > management. It depends on the TLD. .com certainly does not work like .bf or .fr. Big TLD typically don't use zon

Re: [dns-operations] How do you manage multiple domains under a ccTLD?

2024-11-07 Thread Stephane Bortzmeyer via dns-operations
--- Begin Message --- On Thu, Nov 07, 2024 at 04:55:17PM +, Karl Dyson wrote a message of 167 lines which said: > whether you operate separate zone files for each zone *you* are > running is kind of up to you and your choice of administrative > approach. > Nominet take registrations in a

Re: [dns-operations] .VA tld has been intermittently wildcarded?

2024-12-01 Thread Stephane Bortzmeyer via dns-operations
--- Begin Message --- On Sat, Nov 30, 2024 at 08:16:19PM -0500, Mark E. Jeftovic wrote a message of 133 lines which said: > Our domainsure monitors started picking up some weirdness out of .va tld > today as it appeared that up to 3 of their 5 nameservers were wildcarded and > handing out NS r

Re: [dns-operations] NXDomain response in Brazil network

2025-02-11 Thread Stephane Bortzmeyer via dns-operations
--- Begin Message --- On Tue, Feb 11, 2025 at 09:29:38PM +0800, Davey Song wrote a message of 176 lines which said: > No error found when I dig + trace. It seems resolvers in Brazil block this > name. May be only some resolvers? Most of the RIPE Atlas probes in Brazil see the correct answer:

[dns-operations] Authoritative name servers replying NOERROR but with EDE 18 ("Prohibited")

2024-12-10 Thread Stephane Bortzmeyer via dns-operations
--- Begin Message --- I notice that several unrelated name servers have a strange behavior, returning EDE 18 without an obvious reason: % dig +norec @ns.ucad.sn ucad.sn SOA ; <<>> DiG 9.18.28-1~deb12u2-Debian <<>> +norec @ns.ucad.sn ucad.sn SOA ; (1 server found) ;; global options: +cmd ;; Got an

Re: [dns-operations] nih.gov NS only answers TCP queries

2025-03-02 Thread Stephane Bortzmeyer via dns-operations
--- Begin Message --- On Sat, Mar 01, 2025 at 08:44:56PM -0500, Jan Schaumann via dns-operations wrote a message of 86 lines which said: > This was reported on Mastodon[1][2]: A few more details: https://write.as/bortzmeyer/nih-dns-broken --- End Message --- _

Re: [dns-operations] nih.gov NS only answers TCP queries

2025-03-03 Thread Stephane Bortzmeyer via dns-operations
--- Begin Message --- On Mon, Mar 03, 2025 at 09:54:46AM -0500, Keith Mitchell wrote a message of 33 lines which said: > There was much social media speculation over the weekend that this was a > DNS issue, but it seems a lot of NIH online infrastructure was taken > down without too much hee

Re: [dns-operations] nih.gov NS only answers TCP queries

2025-03-03 Thread Stephane Bortzmeyer via dns-operations
--- Begin Message --- On Sat, Mar 01, 2025 at 08:44:56PM -0500, Jan Schaumann via dns-operations wrote a message of 86 lines which said: > It looks like currently the NS for nih.gov only > respond to TCP queries. It seems fixed now. --- End Message ---

Re: [dns-operations] DoH at authorities

2025-02-28 Thread Stephane Bortzmeyer via dns-operations
--- Begin Message --- On Fri, Feb 28, 2025 at 11:10:04AM +, Jared Mauch wrote a message of 29 lines which said: > It appears to just be recursive query as decoded below. Instead of > serving them up a 404 page, I'm likely going to start logging and > storing these. I could send back what

Re: [dns-operations] Sierra Leone (.sl) TLD

2025-02-24 Thread Stephane Bortzmeyer via dns-operations
--- Begin Message --- On Sun, Feb 23, 2025 at 02:25:02PM +0200, Meir Kraushar via dns-operations wrote a message of 135 lines which said: > The reply size of "dig sl any" is 5814 (!) Which is probably not so useful for reflection attacks since very few name servers will serve this size over U

Re: [dns-operations] trafficmanager.net problem affects download.microsoft.com

2025-03-31 Thread Stephane Bortzmeyer via dns-operations
--- Begin Message --- On Mon, Mar 31, 2025 at 04:46:08PM +0200, Daniel Stirnimann via dns-operations wrote a message of 142 lines which said: > The authoritative name servers for trafficmanager.net respond differently > depending on whether the query is made over IPv4 or IPv6. Also, they retu

[dns-operations] E-root instance in San Francisco servfails?

2025-06-19 Thread Stephane Bortzmeyer via dns-operations
--- Begin Message --- The instance p03.sfo.eroot (San Francisco, I guess) returns SERVFAIL for, apparently, every request. I wrote to NASA through their contact form on 17 june, but no reply. The problem disappeared but reappeared today. You can see the proble

<    1   2   3   4   5