cannot resolve oppedahl.com from uspto.gov domain

[Bill Owens]

On Fri, Feb 03, 2012 at 01:55:12PM +0000, Florian Weimer wrote:
> These nameservers:
> 
> dns2.oppedahl.com.      172800  IN      A       208.109.255.50
> dns1.oppedahl.com.      172800  IN      A       216.69.185.50
> 
> return SERVFAIL for EDNS0 queries.  COM contains a signed delegation.
> This configuration is not supported.  It seems that BIND produces
> a failure even if DNSSEC validation is not enabled for the view.

How odd. . . it doesn't look that way from here:

[littledebian:~] owens% dig oppedahl.com soa +norec +edns=0 @216.69.185.50

; <<>> DiG 9.9.0rc2 <<>> oppedahl.com soa +norec +edns=0 @216.69.185.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59472
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;oppedahl.com.			IN	SOA

;; ANSWER SECTION:
oppedahl.com.		3600	IN	SOA	dns1.oppedahl.com. dns.jomax.net. 2011111708 28800 7200 604800 3600

;; AUTHORITY SECTION:
oppedahl.com.		3600	IN	NS	dns1.oppedahl.com.
oppedahl.com.		3600	IN	NS	dns2.oppedahl.com.

;; ADDITIONAL SECTION:
dns1.oppedahl.com.	3600	IN	A	216.69.185.50
dns2.oppedahl.com.	3600	IN	A	208.109.255.50

;; Query time: 100 msec
;; SERVER: 216.69.185.50#53(216.69.185.50)
;; WHEN: Fri Feb  3 09:06:24 2012
;; MSG SIZE  rcvd: 172

; <<>> DiG 9.9.0rc2 <<>> oppedahl.com @216.69.185.50 dnskey +dnssec
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 32030
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;oppedahl.com.			IN	DNSKEY

;; ANSWER SECTION:
oppedahl.com.		3600	IN	DNSKEY	257 3 5 AwEAAZ5XEDidVFrH3eT2nH/W/sbaZFpG6U2oer0H8XJnFwJU83O8DcyH nHDgGtyB/tWH1zcv1CtwVrSRSxtD8lLZfuJFe3cWUP4126URj3rEmeyc U1WNmQVXqykApqCFcGglWnIjflOIoZtkSFJc4TPQjeCF2DuHSXouFY3h rvEZqxMudrtW4a226szsa2KyDWk0R671Gq3emfmwPC77DIwRNkMX/GIP PDZwz5mKXz7awKLOQyEpOcahTlGNWCEGw9w1JxmqbatJh84imuiI2lfY lVsrqI3jHvW2qPz7+sQ9203BMcpp61k/2L1TyMV7bqKDZHnZER6M9Kvo adBsWMUCsZ0=
oppedahl.com.		3600	IN	DNSKEY	257 3 5 AwEAAdnoykMtls1LXIjSR64JB/gdOfkcdzqakUU2I/YClfwSGcIRY8dM 9IvMg69dFwN1kOVwd21gOZxMlRC8FxK3Weygu2EWDVLMJMYppH6jhPtO JOFB6lc8sum63C2mCmy9gbgZmYulSbZbnT608K8g2VCVzksBBJ0rjdaQ Stl17Djyu5aZ7HlNK98iYvkGILPQZnO/2kcIFnpcExHTncW7PvaKMmWr 2PPoKcbv7NV2Pv98GKpcCoST221wGTeYhCay5h55x0fHG51H1DpXURPo XhVx+W7dHFCUM0iIfJciKXqAeQRa/VhQ+3RCW0wuJexYxqaf0RcGjhyu +Ma4GRxd390=
oppedahl.com.		3600	IN	DNSKEY	256 3 5 AwEAAd3FBGqcuvfY9a4csyC0trx9iXIzAZFc4klLr1IF+bhjtUFG9Es/ cD19GeWa/HF65Fzlykgqe+mVYAQ5yled/rLgMOg14jKIWA3dX2aMGMpJ Buddzr/Nvb+AnHk7muwjx9rjUxy1miWKls+AovoWOydgeESJogDDPRdT 9AxS34I9
oppedahl.com.		3600	IN	DNSKEY	256 3 5 AwEAAaIoPlTY6ilGGOMc7zqyuOzRYkpaNMdjrnqmmxJZUsCe3O3oXjA4 gzDq9VsiL67JUKvV6DP/QzJaiGDuqhO7X2GIQsW9iBT9ME98C3xkeDEe FCrJVJJcyRrC2XimcaSE4ri/wXqegif4hq24tvZB2mtFROAfSUzjEJkq /DqDk8jN
oppedahl.com.		3600	IN	RRSIG	DNSKEY 5 2 3600 20120212140129 20120128140129 14779 oppedahl.com. UJl1TpJfuutGzHyZfsW5QwD++namGTDTr9wlqd+OpSYHJD/CCi1n2FLQ 6VgrytswOdIe8lhmU3jF4BqLSkikR7yGNGD/ABHd3nIkIbsuadA9Vp+k csYsjihrsUEGG+ZwArteyqSnfby76c5fHjH3THH56wF6vhEETl0bTsgr +5LKogEGMzHbD2oWyrxe/eJH2lthp5FDCoh9z8rDXqdbjxOvsdp7qRSF WTHy/CVTX1OtuAKhu8qEDooD6jjEOqv16eKNNAD02cwUNjKb7a07kaPj jcBqPrUaPeKI/0NBuW/XuEWKalvX3p+OmUhzFEQDm6WT7RHUF1OqX9jI CtDzZw==

;; Query time: 100 msec
;; SERVER: 216.69.185.50#53(216.69.185.50)
;; WHEN: Fri Feb  3 09:06:46 2012
;; MSG SIZE  rcvd: 1201


Bill.