cannot resolve oppedahl.com from uspto.gov domain

Lear, Karen (Evolver) Karen.Lear at USPTO.GOV
Fri Feb 3 14:18:04 UTC 2012


* Bill Owens:

> On Fri, Feb 03, 2012 at 01:55:12PM +0000, Florian Weimer wrote:
>> These nameservers:
>> 
>> dns2.oppedahl.com.      172800  IN      A       208.109.255.50
>> dns1.oppedahl.com.      172800  IN      A       216.69.185.50
>> 
>> return SERVFAIL for EDNS0 queries.  COM contains a signed delegation.
>> This configuration is not supported.  It seems that BIND produces
>> a failure even if DNSSEC validation is not enabled for the view.
>
> How odd. . . it doesn't look that way from here:
>
> [littledebian:~] owens% dig oppedahl.com soa +norec +edns=0 @216.69.185.50

The exact same command line results in SERVFAIL for me.

Various protocol-specific traceroutes suggests that I'm hitting the
Godaddy servers hosted close to Level3 in Washington DC.

The exact same command line also results in SERVFAIL for me.

Does my DNS reply size limit have anything to do with this?  Should it be over 4000?
[klear at idns1 ~]$ dig +short rs.dns-oarc.net txt

rst.x3827.rs.dns-oarc.net.

rst.x3837.x3827.rs.dns-oarc.net.

rst.x3843.x3837.x3827.rs.dns-oarc.net.

"Tested at 2012-02-03 00:54:03 UTC"

"151.207.242.20 sent EDNS buffer size 4096"

"151.207.242.20 DNS reply size limit is at least 3843"

[klear at idns1 ~]$

-- 
Florian Weimer                <fweimer at bfk.de>
BFK edv-consulting GmbH       http://www.bfk.de/
Kriegsstraße 100              tel: +49-721-96201-1
D-76133 Karlsruhe             fax: +49-721-96201-99
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users




More information about the bind-users mailing list