Good Morning:

I have been struggling with a DNSSEC validation error on 9.7.3 and up.
I am not sure I have an ISC bug or if we have an MTU mismatch near the perimeter
of the Afilias TLDs.

I would like to see if some of the other DNS operators can validate the issue I 
am
experiencing or if this is isolated to a few parts of the US.

I don't know why we wouldn't have caught this earlier.

GOOD:  This command pulling DNSKEYs from the verisign .gov TLD works just
about anywhere

            dig +dnssec +tcp pbgc.gov


BAD:  This command pulling DNSKEYs from the Afilias TLD fails everywhere

            dig +dnssec +tcp pbgc.org


Can anyone confirm this?

--
Derek McUmber
Data Mountain Solutions
[email protected]
703-863-5004

_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs

Reply via email to