Since .org was recently DNSSEC-signed
(http://www.afilias.info/afilias+signs+org+zone), my guess would be that
you have a firewall, an intrusion-prevention device, or somesuch, that
is dropping the packets because it doesn't understand the DNSSEC records
contained in them.
Never mind, reading that press release more deeply, it looks like
they're in a _limited_ testing phase right now. Shouldn't affect you
directly.
Possibly they're having problems with their testing that might have
indirect effect on resolvability.
On Wed, 3 Jun 2009, Kevin Darcy wrote:
Kevin Darcy wrote:
Since .org was recently DNSSEC-signed
(http://www.afilias.info/afilias+signs+org+zone), my guess would be that you
have a firewall, an intrusion-prevention device, or somesuch, that is
dropping the packets because it doesn't
-users@lists.isc.org
Subject: Re: Problem with .org domain resolution
On Wed, 3 Jun 2009, Kevin Darcy wrote:
Kevin Darcy wrote:
Since .org was recently DNSSEC-signed
(http://www.afilias.info/afilias+signs+org+zone), my guess would be that
you
have a firewall, an intrusion
ORG uses NSEC3 rather than NSEC. It would be interesting
to see if you can get responses from .SE or not with the
setting enabled. SE uses NSEC which has been around years
longer than NSEC3.
Mark
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW
5 matches
Mail list logo
