Re: [dns-operations] A strange DNS problem (intermittent SERVFAILs)

2020-06-03 Thread Petr Špaček
On 02. 06. 20 23:39, Guillaume LUCAS wrote: > Hello, > > I just subscribed to this list, so sorry for the thread breaking. > >> Several users on Twitter reported problems accessing Banque >> Populaire (a French bank) > > Since 1 pm (UTC+2) this day (June 2nd), it works from CloudFlare, FDN,… >

[dns-operations] A strange DNS problem (intermittent SERVFAILs)

2020-06-02 Thread Guillaume LUCAS
Hello, I just subscribed to this list, so sorry for the thread breaking. > Several users on Twitter reported problems accessing Banque > Populaire (a French bank) Since 1 pm (UTC+2) this day (June 2nd), it works from CloudFlare, FDN,… everywhere. Customers confirm that on Twitter [*]. But

Re: [dns-operations] A strange DNS problem (intermittent SERVFAILs)

2020-05-30 Thread Stephane Bortzmeyer
On Sat, May 30, 2020 at 06:50:53PM +, dagon wrote a message of 41 lines which said: > How can you even load > such a zone in a modern authority server? All modern auth > servers would fail, I believe. It may be that the authority server is correct but there is a firewall

Re: [dns-operations] A strange DNS problem (intermittent SERVFAILs)

2020-05-30 Thread Ondřej Surý
Most probably it is the load-balancer. I’ve seen this before. Ondřej -- Ondřej Surý > On 30 May 2020, at 21:09, dagon wrote: > > How can you even load > such a zone in a modern authority server? All modern auth > servers would fail, I believe.

Re: [dns-operations] A strange DNS problem (intermittent SERVFAILs)

2020-05-30 Thread dagon
On Sat, May 30, 2020 at 06:09:24PM +0200, Stephane Bortzmeyer wrote: > The existing DNS configuration is clearly very questionable, such as a > zone delegated to just one name server, and a broken one, replying > REFUSED for NS and SOA queries. > The question is "how did this incorrect setup can

Re: [dns-operations] A strange DNS problem (intermittent SERVFAILs)

2020-05-30 Thread Paul Ebersman
matthew-l> I wonder whether the first one (SERVFAIL for NS) is a clue. matthew-l> bcpe.fr is delegated to the same servers which do not answer matthew-l> NS queries. Thus, NS RRSET is only available from the parent matthew-l> (.fr) and not the child. Maybe this upsets child-centric matthew-l>

Re: [dns-operations] A strange DNS problem (intermittent SERVFAILs)

2020-05-30 Thread Matthew Richardson
fr) and not the child. Maybe this upsets child-centric resolvers. I am just guessing though... The whole thing is très mauvaise pratique as reported, all the more so for a bank! Best wishes, Matthew -- >From: Stephane Bortzmeyer >To: DNS Operations List >Cc: >Date: Sat, 30 May 2

Re: [dns-operations] A strange DNS problem (intermittent SERVFAILs)

2020-05-30 Thread Florian Weimer
* Stephane Bortzmeyer: > Several users on Twitter reported problems accessing Banque Populaire > (a French bank) https://www.banquepopulaire.fr > https://www.ibps.loirelyonnais.banquepopulaire.fr > https://www.ibps.bpaca.banquepopulaire.fr > https://www.ibps.mediterranee.banquepopulaire.fr/ > >

[dns-operations] A strange DNS problem (intermittent SERVFAILs)

2020-05-30 Thread Stephane Bortzmeyer
Several users on Twitter reported problems accessing Banque Populaire (a French bank) https://www.banquepopulaire.fr https://www.ibps.loirelyonnais.banquepopulaire.fr https://www.ibps.bpaca.banquepopulaire.fr https://www.ibps.mediterranee.banquepopulaire.fr/ >From the limited reports, all errors