Re: [dns-operations] .co broken for non-stock queries?

2015-06-10 Thread Mark Andrews

See http://ednscomp.isc.org/compliance/tld-typereport.txt and covers
all tld servers.

The report is several days old.  A new report is being generated
and should be regenerated daily.  A file system fault was causing
the server to panic and reboot while the report was being generated.
Some timeouts may be due to network issues / rrl so confirmation
testing should be done.

The CDS=refused is be due to a bug in BIND 9.8.8, BIND 9.9.6 and
BIND 9.10.1. The at parent attribute was not cleared when converting
the DS code to handle CDS.  This bug is fixed in BIND 9.9.7 and
BIND 9.10.2.  BIND 9.8.8 users should upgrade to BIND 9.9.7 or BIND
9.10.2.

Mark

In message alpine.lfd.2.11.1506091204070.32...@bofh.nohats.ca, Paul Wouters w
rites:
 
 I noticed that the .co TLD servers seem to not respond to various
 queries, eg:
 
 dig +norecurse -t openpgpkey roessner.co. @ns1.cctld.co.
 dig +norecurse -t cds roessner.co. @ns1.cctld.co.
 dig +norecurse -t uri roessner.co. @ns1.cctld.co.
 
 It oddly enough does return answers for the private use range.
 
 Anyone know of a .co contact to ask what's going on?
 
 Paul
 
 
 
 ___
 dns-operations mailing list
 dns-operations@lists.dns-oarc.net
 https://lists.dns-oarc.net/mailman/listinfo/dns-operations
 dns-jobs mailing list
 https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs


Re: [dns-operations] .co broken for non-stock queries?

2015-06-10 Thread Warren Kumari
On Wed, Jun 10, 2015 at 3:48 AM, Mark Andrews ma...@isc.org wrote:

 See http://ednscomp.isc.org/compliance/tld-typereport.txt and covers
 all tld servers.


Oh, cool...

What would be really helpful is a description (or link to a
description) of what the tests being performed are -- when it says:
google. @216.239.60.105 (ns-tld5.charlestonroadregistry.com.): all ok

what all does all ok cover? From scrolling down and looking at
failures on other TLDs I can see some things that are being tested,
but knowing all the test would be useful.

W



 The report is several days old.  A new report is being generated
 and should be regenerated daily.  A file system fault was causing
 the server to panic and reboot while the report was being generated.
 Some timeouts may be due to network issues / rrl so confirmation
 testing should be done.

 The CDS=refused is be due to a bug in BIND 9.8.8, BIND 9.9.6 and
 BIND 9.10.1. The at parent attribute was not cleared when converting
 the DS code to handle CDS.  This bug is fixed in BIND 9.9.7 and
 BIND 9.10.2.  BIND 9.8.8 users should upgrade to BIND 9.9.7 or BIND
 9.10.2.

 Mark

 In message alpine.lfd.2.11.1506091204070.32...@bofh.nohats.ca, Paul Wouters 
 w
 rites:

 I noticed that the .co TLD servers seem to not respond to various
 queries, eg:

 dig +norecurse -t openpgpkey roessner.co. @ns1.cctld.co.
 dig +norecurse -t cds roessner.co. @ns1.cctld.co.
 dig +norecurse -t uri roessner.co. @ns1.cctld.co.

 It oddly enough does return answers for the private use range.

 Anyone know of a .co contact to ask what's going on?

 Paul



 ___
 dns-operations mailing list
 dns-operations@lists.dns-oarc.net
 https://lists.dns-oarc.net/mailman/listinfo/dns-operations
 dns-jobs mailing list
 https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
 --
 Mark Andrews, ISC
 1 Seymour St., Dundas Valley, NSW 2117, Australia
 PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
 ___
 dns-operations mailing list
 dns-operations@lists.dns-oarc.net
 https://lists.dns-oarc.net/mailman/listinfo/dns-operations
 dns-jobs mailing list
 https://lists.dns-oarc.net/mailman/listinfo/dns-jobs



-- 
I don't think the execution is relevant when it was obviously a bad
idea in the first place.
This is like putting rabid weasels in your pants, and later expressing
regret at having chosen those particular rabid weasels and that pair
of pants.
   ---maf
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs


[dns-operations] .co broken for non-stock queries?

2015-06-09 Thread Paul Wouters


I noticed that the .co TLD servers seem to not respond to various
queries, eg:

dig +norecurse -t openpgpkey roessner.co. @ns1.cctld.co.
dig +norecurse -t cds roessner.co. @ns1.cctld.co.
dig +norecurse -t uri roessner.co. @ns1.cctld.co.

It oddly enough does return answers for the private use range.

Anyone know of a .co contact to ask what's going on?

Paul



___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs


Re: [dns-operations] .co broken for non-stock queries?

2015-06-09 Thread Joe Abley

Hi Paul,

On 9 Jun 2015, at 12:10, Paul Wouters wrote:


I noticed that the .co TLD servers seem to not respond to various
queries, eg:

dig +norecurse -t openpgpkey roessner.co. @ns1.cctld.co.
dig +norecurse -t cds roessner.co. @ns1.cctld.co.
dig +norecurse -t uri roessner.co. @ns1.cctld.co.

It oddly enough does return answers for the private use range.

Anyone know of a .co contact to ask what's going on?


CO nameservers (and the registry, I think) are operated by Neustar. 
There are Neustar people here.



Joe
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs